Code Execution

VULNLAB: Retro2

Retro2 is an easy difficulty Windows machine, which highlights AD exploitation. Initial external enumeration reveals a publicly accessible SMB Share containing …

August 22, 2024 · 3420 words · 17 min

Easy Windows SMB share MS Access Weak password Code execution Hard-coded credentials GenericWrite RpcEptMapper

VULNLAB: Reaper2

ReaperTwo is an Insane Windows machine that involves both browser and kernel exploitation. The attack chain begins with enumeration of exposed services and …

May 10, 2024 · 2004 words · 10 min

Insane Windows Code execution Kernel exploitation ROP Chain Python Web Assembly C ASLR

VULNLAB: Tengu

Tengu is a medium-rated chained machine on VulnLab, features a mixed environment with two Windows hosts and one Linux host. Exploiting Node-RED on Linux (with …

March 28, 2024 · 8124 words · 39 min

Medium Windows Node-RED Credential harvesting MSSQL SUDO NTLM hash gMSA Code execution DPAPI

VULNLAB: Store

Store is a Hard difficulty box that hosts a Node.js web application, allowing file uploads and storage. The app is vulnerable to Arbitrary File Read, which lets …

February 17, 2023 · 2519 words · 12 min

Hard Linux Fuzzing LFI NodeJS Code execution SFTP Chrome debugger Chrome Web Driver

No posts match this tag.