Offsec Proving Grounds Walkthrough – Twiggy

Posted inEthical Hacking, Hacking, Linux, Networking, Offsec, Python, Security, Tutorial, Walkthrough
🚨Walkthrough of the machine called "Twiggy" in the OffSec Proving Grounds...don't watch unless you want help getting through the machine. I had some issues with figuring out how to take advantage of the exploit but eventually prevailed after some experimentation. We take advantage of a RCE in ZeroMQ ZMTP software…

Offsec Proving Grounds Walkthrough – CVE-2024-48061

Posted inEthical Hacking, Hacking, Networking, Offsec, Security, Tutorial, Walkthrough
New Vid! (sorry for posting later than usual the holiday got me!) ***SPOILER***Walkthrough of the OffSec machine called "CVE-2024-48061" in the Proving Grounds...we exploit LangFlow using an RCE flaw, don't watch unless you want help getting through the machine. https://youtu.be/hNSSYO-dxwM?si=XVTJCBjOlzgxG-x1

Offsec Proving Grounds Walkthrough – CVE-2023-6019

Posted inEthical Hacking, Hacking, Linux, Offsec, Python, Security, Walkthrough
Another OffSec walkthrough, this time we are doing a machine called CVE-2023-6019...so guess what vulnerability we exploit here, LOL. I show you how to setup a python virtual environment and run the exploit to get a root shell. ***SPOILER***Walkthrough of the machine called "CVE-2023-6019" in the Offsec Proving Grounds...don't watch…

Offsec Proving Grounds Walkthrough – Exghost

Posted inEthical Hacking, Hacking, Linux, Networking, Offsec, Python, Security, Tutorial, Walkthrough
New OffSec Proving Grounds walkthrough. This time we tackle a machine called Exghost. This walkthrough involves: ☑️Brute forcing credentials ☑️Reading through a Wireshark packet capture file ☑️Crafting a malicious image to exploit ExifTool ☑️Exploiting a kernel vulnerability I had to get creative at the end and I leaned a bunch…

Walkthrough – Offsec Proving Grounds – Astronaut

Posted inEthical Hacking, Hacking, Linux, Metasploit, Networking, Offsec, Security, Tutorial, Walkthrough
New video - OffSec Proving Grounds Walkthrough of "Astronaut". This was an interesting box that we use many tools an techniques to pwn including Metasploit Framework, PHP reverse shell, and GTFObins! This is a complete walkthrough of the machine so don't watch the video unless you want help compromising the…