This is the part two of android pentest, part one documentation is found here. In this document I will show how to intercept android application traffics using burpsuite. In previous post I show...

Mobile application penetration test is similar to web application pentest but it can sometimes be trick to set an environment to perform this action. In this post I will share all necessary steps r...

This is Hackthebox medium Linux machine implemented in NextJS technology with api. This box requires much of enumeration with proper payloads and wordlists in order to get proper responses. I will...

This is hackthebox Windows machine rated hard, with interesting cool way of exploitation start from leaking hashes, password spraying to more privileged users for system account I will demonstrate ...

This is hackthebox Windows machine with outdated installed software which results to remote code code execution which i will use it to get user account and then kernel unpatched issues which i will...

As I was learning Cyber Threat Intelligence I chose Open CTI as demo tool while taking this path, and these were my installation steps which I followed while configuring it. In this document I will...

This is hackthebox easy rated machine designed to show the command injection for the user access and path injection knowledge for the root user. In this box i will show different ways of how to be ...

Enumeration Nmap Scan # Nmap 7.93 scan initiated Wed Jan 11 12:05:23 2023 as: nmap -sC -sV -oN nmap-scan 10.10.11.176 Host is up (0.18s latency). Scanned at 2023-01-11 12:05:26 EAT for 74s Not show...

Enumeration Nmap Scanning Command └─$ nmap -sC -sV -oN nmap-scan -Pn 10.10.10.77 Result # Nmap 7.93 scan initiated Sat Dec 24 10:06:19 2022 as: nmap -sC -sV -oN nmap-scan -Pn 10.10.10.77 Nmap scan...

Enumeration Command nmap -sC -sV 10.10.10.169 -oN nmap-scan Nmap Scan # Nmap 7.93 scan initiated Fri Dec 23 12:59:07 2022 as: nmap -sC -sV -oN nmap-scan 10.10.10.169 Nmap scan report for 10.10.10....