https://wearethebug.dev/tags/git/Recent content on WE ARE THE BUGTradecraften-usThu, 17 Apr 2025 00:00:00 +0000https://wearethebug.dev/posts/vl-shiva/Thu, 17 Apr 2025 00:00:00 +0000https://wearethebug.dev/posts/vl-shiva/Shiva is an insane-difficulty Red Team lab on Vulnlab that simulates a hardened hybrid Active Directory environment (on-premises and Azure) with 10+ machines and active users. All protected by Endpoint Detection and Response (EDR), SIEM solutions, Windows Defender Application Control (WDAC), and common enterprise software.https://wearethebug.dev/posts/vl-lock/Fri, 19 Jan 2024 00:00:00 +0000https://wearethebug.dev/posts/vl-lock/Lock is an Easy-rated Windows machine that involves enumerating a Gitea repository to find a Personal Access Token. This token is then used to deploy an ASPX web shell on the server, which provides an initial foothold. A password is then decrypted from an mRemoteNG configuration file, providing access to a new user account. Finally, a local privilege escalation vulnerability in the PDF24 application is exploited to obtain a shell with SYSTEM privileges.