Offsec Proving Grounds Walkthrough – Sorcerer

📣This is a walkthrough of the Offsec machine called "Sorcerer". I really enjoyed this one and there aren't too many walkthroughs of it available, so I hope this helps! It features exploitation using gobuster, script modification, scp, SSH Keys, and abusing binaries with the SUID set. I learned a lot…

Offsec Proving Grounds Walkthrough – Twiggy

🚨Walkthrough of the machine called "Twiggy" in the OffSec Proving Grounds...don't watch unless you want help getting through the machine. I had some issues with figuring out how to take advantage of the exploit but eventually prevailed after some experimentation. We take advantage of a RCE in ZeroMQ ZMTP software…

Offsec Proving Grounds Walkthrough – CVE-2023-6019

Another OffSec walkthrough, this time we are doing a machine called CVE-2023-6019...so guess what vulnerability we exploit here, LOL. I show you how to setup a python virtual environment and run the exploit to get a root shell. ***SPOILER***Walkthrough of the machine called "CVE-2023-6019" in the Offsec Proving Grounds...don't watch…

Multithreaded Port Scanner

I am FAR from a developer so go easy on me. This is an attempt at a multithreaded port scanner. I have it down to about 40 seconds to scan all 65,535 port (using my PC). The threading was obviously the hard part and I relied on several code examples…