22 matches found
VulnHub-DC1-Writeup
VulnHub-DC1-Writeup "Penetration testing lab writeups documenting full attack chains — from recon to root." 🔓 VulnHub — DC-1 Boot-to-Root Writeup Difficulty: Beginner–Intermediate Platform: VulnHub Goal: Capture all 4 flags and achieve full root-level compromise Attacker OS: Kali Linux VirtualBox...
sunset-noontide-pentesting
Sunset: Noontide — Penetration Testing A professional penetration testing assessment and CTF walkthrough of Sunset: Noontide , an intentionally vulnerable machine from VulnHub. This project documents the complete penetration testing lifecycle, including reconnaissance, service enumeration,...
Penetration-Testing-Walkthrough-Hacksudo-Thor
HackSudo Thor Full Penetration Testing Walkthrough Target: HackSudo Thor from VulnHub Objective: Gain root access and read /root/proof.txt Environment: Isolated VirtualBox lab segmented by a pfSense firewall Table of Contents Overview Network Topology Attack Chain Summary Phase 1: Passive...
blackbox-pentesting-infsecos
Black-Box Penetration Test — SecOS:1 VulnHub Overview Full black-box penetration test against SecOS:1 , a deliberately vulnerable CTF machine from VulnHub. Objective: simulate a real-world attacker with zero prior knowledge and achieve root-level compromise, evidenced by retrieving /root/flag.txt...
vulnhub-labs
VulnHub labs Notas reorganizadas a partir de un export sucio...
Vulnerability-Assessment-Penetration-Testing-Engagement-X-Company
VAPT Report — Venus & Napping X Company Engagement Vulnerab...
kioptrix-level1-writeup
Kioptrix Level 1 — Penetration Test Write-up A full walkthrou...
Metasploit
Metasploit Research Structured documentation of my Metasploit...
Black_Box-Penetration-Testing
BlackBox-Penetration-Testing Black-box penetration test again...
vulnhub-writeups
VulnHub Writeups Author: Roman Mares Company: Delt...
IMF-1-walkthrough
IMF: 1 — Boot2Root Walkthrough Platform: VulnHub Diff...
ctf-writeups-Doli1
🛡️ Doli 1 — CTF Writeup VulnHub VAPT Report For...
Exploits-and-code-snippets
Exploits-and-code-snipp...
Exploits-and-code-snippets
Exploits-and-code-snipp...
vulnhub-machines-writeups
vulnhub-machines-writeups Collec...
Autoenum - Automatic Service Enumeration Script
Autoenum is a recon tool which performs automatic enumeration of services discovered. I built this to save some time during CTFs and pen testing environments i.e. HTB, VulnHub, OSCP and draws a bit from a number of existing tools including AutoRecon https://github.com/Tib3rius/AutoRecon, Auto-Rec...
vulhub
It is an open-source collection of pre-built vulnerable docker environments. The primary vulnerability is a Flask SSTI Server-Side Template Injection vulnerability. The target product/service is Flask, a Python web framework. The vulnerability class/vector is SSTI, which allows an attacker to...
PlaySMS 1.4 - sendfromfile.php?Filename Authenticated Code Execution Exploit
This Metasploit module exploits a code injection vulnerability within an authenticated file upload feature in PlaySMS version 1.4. This issue is caused by improper file name handling in sendfromfile.php file. Authenticated Users can upload a file and rename the file with a malicious payload. This...