Web Application Remote Code Execution
JSP File Upload Remote Code Execution using PowerShell Empire During a penetration test on a Web application, we have found a file upload functionality. File uploads are always interesting for a [...]
Hacking for Beer – NTLM Relay (HTTP to SMTP)
Another round of the Hacking for Beer contest. This time, the plan was to send an email that will trigger an authentication request back to my machine and have my machine forward connections to [...]
Hacking for Beer – IP Spoofing
After having to pay rounds because of the Rubber Ducky attack, I wanted a revenge ! Daniel participated in the hardening of our email server and apparently he put extra effort to prevent SMTP [...]
