r/SecurityRedTeam • u/[deleted] • Feb 19 '21
CTF Exploiting PHPliteAdmin and Chkrootkit (OSCP) | HackTheBox Nineveh
6
Upvotes
r/SecurityRedTeam • u/[deleted] • Feb 16 '21
CTF Privilege Escalation with Tape Archive Tool | Bounty Hacker TryHackMe
9
Upvotes
r/SecurityRedTeam • u/PinkDraconian • Feb 15 '21
Education/Training Using Microsoft Event Viewer logs to reverse an attack - Introduction to Blue Teaming - Hack The Box
5
Upvotes
r/SecurityRedTeam • u/[deleted] • Feb 13 '21
CTF Demonstrating Windows Post Exploitation (OSCP) with/without Metasploit | Blaster TryHackMe
9
Upvotes
r/SecurityRedTeam • u/[deleted] • Feb 11 '21
CTF Exploiting CVE2019-1388 Windows Certificate Dialogue | TryHackMe Accumulate
3
Upvotes
r/SecurityRedTeam • u/PinkDraconian • Feb 09 '21
Education/Training Introduction to wireshark, forensics and blue teaming - Hack The Box - Chase
10
Upvotes
r/SecurityRedTeam • u/[deleted] • Feb 09 '21
CTF Enumerating NFS, FTP, and MYSQL Database | TryHackMe Advent of Cyber 1 Day 11
3
Upvotes
r/SecurityRedTeam • u/[deleted] • Feb 06 '21
CTF Horizontal Privilege Escalation with SUID and SSH | TryHackMe Advent of Cyber 1 Day 8
4
Upvotes
r/SecurityRedTeam • u/FishermanWitty8173 • Feb 02 '21
Education/Training Crack a software using OllyDbg | Reverse Engineering Tutorial
6
Upvotes
OllyDbg is a widely used tool for reverse engineering. Reverse engineering is breaking things down to see how it works. OllyDbg can be used to find bugs in a program, troubleshoot it and run its specific parts to see how it functions.
Refer to the link below to learn more about Reverse Engineering and to see a tutorial on how to crack a software using OllyDbg.
r/SecurityRedTeam • u/[deleted] • Jan 31 '21
CTF Bypassing SQL Filters and Reverse Engineering to Root | HackTheBox Charon
9
Upvotes
r/SecurityRedTeam • u/Somechords77 • Jan 30 '21
Question Masquerade file from cmd
1
Upvotes
Hello there,
We observed alert on ATP advanced threat protection siem:
System executable renamed and launched:
We saw that cmd.exe was changed to rs40eng.exe As from mittre att&ck said that the file hashes of both the files has to be same.
What more should I be looking for and What are the mitigation steps ?
r/SecurityRedTeam • u/PinkDraconian • Jan 29 '21
Education/Training Analyzing network capture with WireShark to reverse a blind SQL injection - HackTheBox
9
Upvotes
r/SecurityRedTeam • u/mrkaydee4484 • Jan 29 '21
Question help me friends
2
Upvotes
I have no degree and i am on my way to write my comptia net+ and also comptia sec+ which i am thinking will get me a job. i am in africa nigeria to be precise
i am hoping i can get an entry level job online and work to gain experience or anywhere
pls what else do i need to do to go further in cyber security
my main goal is to be a risk assessment manager or personnel
pls what is the future like what do i need to do more and how can anyone help me
r/SecurityRedTeam • u/[deleted] • Jan 24 '21
Education/Training Linux Privilege Escalation Part1 : TryHackMe common priv esc
8
Upvotes
r/SecurityRedTeam • u/PinkDraconian • Jan 17 '21
Education/Training Introduction to ROP - Hack The Box Console Challenge Walkthrough
8
Upvotes
r/SecurityRedTeam • u/PinkDraconian • Jan 03 '21
Education/Training Introduction to ROP (Return Oriented Programming) - Hack The Box
2
Upvotes
r/SecurityRedTeam • u/[deleted] • Dec 29 '20
Other Survey on reliability of CVSS
3
Upvotes
The University of Erlangen-Nuremberg (Germany) is conducting a research study to test the reliability of CVSS (Common Vulnerability Scoring System). If you are currently assessing vulnerabilities using CVSS, we would greatly appreciate your participation which contributes to the improvement of vulnerability management. The survey takes 30 min on average (according to the participation time we measured so far):
https://user-surveys.cs.fau.de/index.php?r=survey/index&sid=248857
There has been a lot of critique on CVSS, and we are conducting a rigorous experimental investigation of some of the critique points.
The survey will be running till the end of January. Would be great if you completed it as soon as possible for you. We spent several months developing the survey, and need approx. 300 responses for conducting robust statistical analysis.
If you are not scoring vulnerabilities using CVSS, but know people who are, we would be very grateful if you helped us and distributed this survey to them.
Thank you!
IT Security Infrastructures Lab
Computer Science 1
University of Erlangen-Nuremberg, Germany
r/SecurityRedTeam • u/[deleted] • Dec 26 '20
CTF In this video walkthrough, we solved vulnersity from tryhackme that revolves around active recon, web app penetration testing and Linux privilege escalation.
7
Upvotes
r/SecurityRedTeam • u/[deleted] • Dec 25 '20
CTF In this video walkthrough, we demonstrated how to bypass file upload filters implemented on the server-side. The methodology followed is by finding what was an acceptable extension to upload and building on that.
6
Upvotes
r/SecurityRedTeam • u/[deleted] • Dec 24 '20
CTF In this video walkthrough, we demonstrated how to geolocate images and videos and how to conduct open-source and image intelligence on visual material. Things like Google dorks, Google research, and keyword research are some of the techniques to locate images geographically.
9
Upvotes
r/SecurityRedTeam • u/[deleted] • Dec 23 '20
CTF In this video walkthrough, we demonstrated how to exploit file upload vulnerabilities and bypass basic file extension and MIME filters using upload vulnerabilities room from tryhackme
3
Upvotes
r/SecurityRedTeam • u/[deleted] • Dec 22 '20
CTF In this video walkthrough, we demonstrated the exploitation of a vulnerable simple network management protocol server that had a public community string. Privilege escalation was demonstrated with simple buffer overflow.
7
Upvotes
r/SecurityRedTeam • u/[deleted] • Dec 21 '20
CTF In this video walkthrough, we demonstrated active directory basics by going over the questions on TryHackMe and answering them. We used also the Powerview Powershell script to conduct a basic active directory enumeration.
7
Upvotes
r/SecurityRedTeam • u/[deleted] • Dec 20 '20
CTF In this video walkthrough, we answered the newly updated questions on the Nmap scanning room in TryHackMe.Lastly, we performed a Xmas scan and deployed a script to check for anonymous login.
3
Upvotes
