Hive

ptonewreckin (25)in #security • 6 years ago
Revenge of the Sticky Keys - An Exercise In Privilege Escalation and Persistence
A while back I was messing with the Pupy framework and decided to write a fun module for persistence/privilege escalation. The technique presented in this entry is nothing new…
$0.00
0 2
ptonewreckin (25)in #security • 6 years ago
Direct Object References - What are they and how can we stop them!!?
During an interview a few years back I was asked, "If you had the power to remove any application-related vulnerability from existence, what would it be?" My response was pretty…
$0.00
5 1
ptonewreckin (25)in #security • 6 years ago
Gymnastics with SSH
Let's say you travel a lot or are on vacation in Greece. Is Greece awesome? You're goddamn right it is - Dining above Athens with a bottle of Domaine Romanée Conti overlooking…
$0.00
2 1
ptonewreckin (25)in #security • 6 years ago
Windows + Python
A quick way to setup Python in Windows. Download Chocolatey - A package manager for Windows. choco install python2 PS C:\Windows\system32> which python…
$0.00
1 0
ptonewreckin (25)in #security • 6 years ago
Getting Jumpy With The Bash Bunny
After weeks of waiting I've finally obtained my Bash Bunny. Essentially, the Bash Bunny serves as a small piece of hardware (USB stick) that can conduct several actions by…
$0.00
2 0
ptonewreckin (25)in #security • 6 years ago
SSH Tunneling In Windows
Ever wanted to use SSH on Windows? There are several tools we can use to do so including Plink/Putty/Bitvise. While these solutions do work, they're a bit less natural than just…
$0.00
0 2
ptonewreckin (25)in #security • 6 years ago
Exploiting XXE
XML External Entity (XXE) Injection: The vuln that keeps on giving... XXE Injection can occur when XML parsers are overly permissive in their configurations and allow for the…
$0.00
0 0