Recent posts
-
My home Red Team lab: Ludus + GOAD-Light + Elastic
I have built a vulnerable Active Directory lab at home with defensive telemetry, and documented it step by step in a separate guide. Here I explain what it is, why I built it and…
-
node2shell: a Brotli flaw in Node.js
Right after php2shell came node2shell, a flaw in the Brotli decompressor bundled with Node.js that can end in remote code execution. It shipped in the Node.js security releases of…
-
php2shell: two critical flaws in PHP
This week php2shell came out, the name given to two PHP vulnerabilities that allow unauthenticated remote code execution. The patches are from 21 October and there is already real…
-
Expressway
Expressway es la primera máquina easy de la Season 9.
-
Payload Encryption
Payload encryption is a technique attackers use to hide malicious code inside a file or program. By using different encryption methods, the payload's content stays unreadable to…
-
Detection Mechanisms
A signature is a set of unique bytes or strings that identify a piece of malware; other conditions can be variables or function names. Once the security solution scans the…
-
BruteIt
Sala: Brute It en TryHackMe
Notes
- MalDev 2
- Linux and tools 24
- eJPTv2 notes 37
- OWASP Top 10 2
- CPTS 100
- MalDev notes 5
- Ludus lab 7