Exploiting vulnserver.exe — GMON command using SEH overwrite
In this write-up, I will discuss about attacking GMON command of vulnserver.exe with SEH overwrite.
pwn windows-exploitation SEH
Recent Posts
Exploiting vulnserver.exe — TRUN command using JMP ESP technique
In this write-up, I will discuss about attacking TRUN command of vulnserver.exe with JMP ESP technique.
pwn windows-exploitation jmp-espTJCTF 2020 Pwn writeup
This is a quick walkthrough of my solutions for TJCTF 2020 pwn challenges. I will just elaborate some of the tricks that I learned while solving these challe...
pwn format-string ropHTB Writeup - Mango
Mango is rated as a medium difficulty linux machine. This machine is hosting a webserver vulnerable to NoSQL injection, allowing attackers to leak credential...
nosql injection jjs gtfobinsHTB Writeup - Traverxec
Traverxec is one of the beginner friendly boxes in HTB. This machine is hosting a webserver vulnerable to remote code execution, exposing a backup SSH privat...
nostromo journalctl ssh2john gtfobins