LFI

VULNLAB: Lustrous2

LustrousTwo is a hard-rated Windows machine that deals with LDAP signing, channel binding, and disabled NTLM authentication. The machine has a web server …

September 11, 2024 · 7310 words · 35 min

Hard Windows LFI NTHash steal S4U2SELF Reverse engineering RCE CVE-2024-10526 Velociraptor

VULNLAB: Reset

Reset is an Easy difficulty Linux machine which showcases abusing a password reset functionality in a web application following a log poisoning attack, to …

February 7, 2024 · 1646 words · 8 min

Easy Linux LFI Log poisoning RCE Rlogin Tmux hijack Sudo

VULNLAB: Store

Store is a Hard difficulty box that hosts a Node.js web application, allowing file uploads and storage. The app is vulnerable to Arbitrary File Read, which lets …

February 17, 2023 · 2519 words · 12 min

Hard Linux Fuzzing LFI NodeJS Code execution SFTP Chrome debugger Chrome Web Driver

VULNLAB: Trusted

Trusted is an Easy small Active Directory chain involving two domain controllers (labdc.lab.trusted.vl and trusteddc.trusted.vl) that focuses on web …

September 20, 2022 · 7056 words · 34 min

Easy Windows Apache XAMPP LFI Fuzzing MariaDB ForceChangePassword ProcMon Reverse engineering DLL Hijack Domain trusts EFS bypassing WinRM RDP

No posts match this tag.