Security Research

Latest blog posts below

Manager- Hackthebox

I started with a full port scan using my Nmap automation script. https://github.com/HutchSec/portScan The scan revealed several interesting services including SMB, MSSQL, WinRM, and HTTP. SMB Enumeration — RID Cycling Anonymous SMB access was enabled, Read more

Buff- Hackthebox lab

I began the assessment by performing an Nmap port scan to identify open services on the target machine. The scan revealed that port 8080 was open, hosting a web service with the intriguing HTTP title: Read more

Traverxec- Hackthebox

I began with an Nmap scan to identify open TCP ports, detect service versions, and run the default NSE scripts. The scan revealed two open ports: 22 (SSH) and 80 (HTTP). Port 80 was hosting Read more

Cap- Hackthebox lab

This machine has a webs server that has unauthenticated access with an IDOR (Insecure Direct Object Reference) vulnerability. By changing the number at the end of the URL, you can find a PCAP file with Read more