CMS Exploitation
Post covering information on Content Management Systems, scanning for any vulnerabilities present, and attack scenarios for various systems.
Recent Posts
SQLi Cheat Sheet
Collection of common SQL Injection commands and techniques for various database technologies.
Basic Password Attacks
The premise of password attacks is simple. If a service requires credentials to access it, we simply guess or brute force the credentials until they’re accepted. The targeted services play a huge part in our approach, therefore the tools and techniques will vary from host-to-host.
Password Lists
Abusing Windows Credentials
During a pentest there is a high chance you’ll stumble across user hashes and credentials. Knowing how to leverage these findings is essential.
Recommended Reading
Small collection of books I own, as well as useful links and resources for infosec and offensive security.
Information Security Management Principles
This post focuses on essential Information Security Management Principles and the CIA Triad.