viv4ldi@ARCH4EA:~$
whoami
CPTS certified. Bug bounty hunter. CTF player.
viv4ldi@ARCH4EA:~$
ls ./topics
bug-bounty ctf certs misc
viv4ldi@ARCH4EA:~$
bug-bounty/
Vulnerability research, write-ups, and methodologies from bug bounty programs.
2 posts
ctf/
Capture the Flag challenge solutions, techniques, and tooling breakdowns.
5 posts
certs/
Certification reviews, study guides, and tips for the road to getting certified.
3 posts
misc/
Non-hacking thoughts, life stuff, and anything that doesn't fit elsewhere.
0 posts
// recent posts
- Burp Extensibility MonthIntro It is officially Burp Extensibility Month. Burp Suite is the most used security tool, when it comes to web application security. It already has many built-in features. However, Burp Extensions allow you to level up your existing testing processes, and workflow. There are a lot of them with most of them being available for Burp Suite Community Edition users. In this blog post I would like to talk about some of them that I use quite often when I am testing for Bug Bounty Programs or when I am doing CTFs.
- CPTS Review: How to Pass the Hack The Box Certified Penetration Testing SpecialistIntro After all the patience and work, I finally got that email. I passed the Certified Penetration Testing Specialist (CPTS) exam by Hack The Box. It has been a very long and challenging journey but at the same time a rewarding one. In this blog post I will provide you with some tips and thoughts about the preparation process and the exam itself. While I believe I will be sharing a lot of things in common with other blogs like Bruno Chamoura’s posts, I still believe I have some additional tips and hints for the folks working their journey of becoming Hack The Box certified. I hope you enjoy.
- Advanced GraphQL Attacks: Part 1Recently I got interested in API hacking, seeing during my tests more and more companies transforming their architectures from monolithic design to microservices. In this first part of my GraphQL hacking series you will get an introduction on what GraphQL is, and at the end I will show a critical finding I found regarding the GraphQL API of Belgian train company NMBS/SNCB. What Are APIs Being in this field it’s impossible to not be aware of APIs unless one lives under a rock.
- HTB - CraftCraft is a medium difficulty Linux box, hosting a Gogs server with a public repository. One of the issues in the repository talks about a broken feature, which calls the eval function on user input. This is exploited to gain a shell on a container, which can query the database containing a user credential. After logging in, the user is found to be using Vault to manage the SSH server, and the secret for which is in their Gogs account. This secret is used to create an OTP which can be used to SSH in as root.
- HTB - CCTVCCTV is a medium difficulty Linux machine from Hack The Box. Nmap Scan As usual, we start with an nmap scan. 1nmap -sT -sV -sC -oA nmap/cctv 10.129.3.52 Port 80 is open. The webpage itself is relatively static. Following the staff login link we land on a ZoneMinder instance. ⚠ Machine Still Active This machine is currently active on Hack The Box. The full writeup will be published once it retires.