Dec 12, 2021Exploiting the Log4J Vulnerability [CVE-2021–44228]Well it looks like Christmas came early for pentesters , hackers and bug bounty hunters. First, the grafana 0-day exploit that made headlines and then if that was an appetizer the Apache Log4J 0-day was the whole meal that sealed it. Who knows what is up next?.. What is Log4j? Well as the…4 min read
Sep 19, 2021Simple In-Memory InjectionRecently, i got into learning how c#, c++ work with win32 API in windows and how powershell interacts with win32 API . That’s when i learned about process based memory injections and Disk based injections which are used to put malicious operations into an executable in the windows environment and…Pentesting5 min read
Mar 28, 2021Another OSCP tale- an outlook into it.Hello readers, so it has been a long-time since writing content . I recently cleared the OSCP certification with the PWK2020 edition. So this blog post will be about my experience, takeaways and the things to look out for in the OSCP. //Please note the information below is based on…Oscp7 min read
May 30, 2020Hunting and Exploiting the Apache GhostcatThe Apache Ghostcat vulnerability is a file inclusion vulnerability which came out in the first quarter of this year while the world was gearing up for a lockdown fight up against the coronavirus. It allows any attacker to read files such as configuration files , test files or any other…Cybersecurity5 min read
Apr 19, 2020Oauth and SecurityOauth2.0 framework and common security test cases — Introduction to Oauth Oauth2 is an authorization framework at best. Consider the following generic example, Alice and Bob want to submit their CVs on a job posting website called JOBS.com. Now JOBS.com has two ways of uploading a CV. The first option uses Alice and Bob’s LinkedIn profile as their…Oauth 28 min read
Published in Coinmonks·Dec 22, 2019Compromising a BlockchainHello readers, in this article I just want to share my experience of working around a Machine named Chainsaw. I am a noob to network security so started doing some Hackthebox Stuff to learn. Any noobs like myself that want to learn network security can watch videos of ippsec(helps a…Ethereum7 min read
Dec 7, 2019All about GraphQL Security , GraphQLvs REST API model.The traditional REST model is similar to doing following tasks like getting your shipments delivered to you, ordering food online i.e, two different activities hence two different calls. However, GraphQL is like having personal assistant that does tasks for you once you give the required details such as address and…Graph QL6 min read
![Exploiting the Log4J Vulnerability [CVE-2021–44228]](https://miro.medium.com/fit/c/224/224/1*ld4Sp8BDjFsDIBJ8i-92xw.png)
![Exploiting the Log4J Vulnerability [CVE-2021–44228]](https://miro.medium.com/fit/c/112/112/1*ld4Sp8BDjFsDIBJ8i-92xw.png)
