Slack is a productivity platform used by many businesses for team chats and communication. There’s a great article about abusing Slack for offensive operations that gives a detailed overview of the platform and how it can be leveraged. Then there’s a Part 2 article that gets into the

Source website: https://gandalf.lakera.ai Last night, I was pointed to the Gandalf challenge provided by Lakera. Lakera provides AI based services to test and secure implementations of AI/LLMs in applications. The Gandalf challenge is an AI chatbot and the goal is to manipulate it to give up

Source room: https://tryhackme.com/room/bof1 This task is just like the Task 8 machine, only with different offsets. There are plenty of walkthroughs for Task 8 so I decided to do one for Task 9. Let’s dive right in! I SSHed into the machine and into the

This is my writeup for the TryHackMe “Brainstorm” room. The goals of this room are to reverse engineer a chat program running on a Windows machine and write an exploit to gain root access. It’s recommended to complete the previous buffer overflow exercises. I just finished the Buffer Overflow

Source room: https://tryhackme.com/room/bof1 In this task, our objective is to overwrite the normal flow of the program so that it jumps to the special() function. This function is otherwise unreachable by any program logic. After we SSH into the machine and CD to the “overflow-2” folder,

This week, there was an incident with one of our clients where they received a mass credential harvesting email and several of the users clicked on the link and input their passwords. I immediately had those credentials reset and deleted all the messages from their Exchange server, cleared the users’

Overnight, CrowdStrike pushed a bugged content update for their Falcon EDR on Windows hosts. The affected hosts crash with a bugcheck/bluescreen error relating to the Falcon Sensor or csagent.sys file. Current status updates can be found on the CrowdStrike statement page here. Remediation recommendations are to reboot the

https://tryhackme.com/r/room/airplane Airplane is another tagline-only room at TryHackMe with the description of “Are you ready to fly?” I am; let’s fly! I am working on a Kali VM with a VPN connection to TryHackMe. With the VPN connected and room instance launched, I started

Expose is a TryHackMe room with the tagline “Use your red teaming knowledge to pwn a Linux machine.” That’s not much in the way of details besides exposing (no pun intended!) that it’s a Linux box, so let’s get straight to nmap and find out what we’

This is my writeup for the TryHackMe room “Retro” at https://tryhackme.com/room/retro. This room is labeled a “hard” room so I wasn’t quite sure what to expect. I still feel like there’s so much I still need to learn, but I’m definitely getting into

This writeup is for the TryHackMe room “Brainpan 1” at https://tryhackme.com/room/brainpan. The goal for this room is to reverse engineer a WIndows executable and craft a buffer overflow to gain access to the machine. There are three questions for this room with no flags to capture,

This is my writeup for the TryHackMe “Gatekeeper” room at https://tryhackme.com/room/gatekeeper. Gatekeeper is a delightfully vague room requiring me only to submit a User flag and a Root flag. There is little description beyond mentioning a gate and fire twice. Sounds exciting! Let’s begin. Note: