Security Blog
Cybersecurity research, vulnerability analysis, and practical security insights.
Getting Started with Browser Exploitation Framework (BeEF) in Kali Linux
BeEF is short for The Browser Exploitation Framework. it’s a testing tool designed to enable penetration testers to launch client-side attacks against target browsers. By using techniques...
Hack Windows 7 with Metasploit Using Kali Linux
Today i am gonna show how to exploit any windows OS using metasploit. Exploiting a windows vulnerability to logging into the system with out username and password using Metasploit. Before...
Crack and Reset the System Password Locally Using Kali Linux
Hi folks, For today post i will show you how to crack and reset password at times when you forget it or when you want to gain access to a computer for which you do not know the password. there are...
Kingslayer - A supply chain attack -- Part 2
_ _ _ _ _____ | |__ | || | ___| | ___ __ ___ |___ / | '_ \| || |_ / __| |/ / '_ ` _ \ |_ \ | | | |__ _| (__| <-- BACK TO hackdog.me Kingslayer - A...
Kingslayer - A supply chain attack -- Part 1
_ _ _ _ _____ | |__ | || | ___| | ___ __ ___ |___ / | '_ \| || |_ / __| |/ / '_ ` _ \ |_ \ | | | |__ _| (__| <-- BACK TO hackdog.me Kingslayer - A...
网络设备中限制用户命令交互的逃逸
在实际渗透场景中，有很多网络设备我们拿到了root权限后ssh登陆发现有命令执行限制，这是因为ssh接口提供了一个特殊的受限制的命令外壳程序，类似busybox的感觉，他可以允许root用户对设备进行配置处理，但是不允许进行命令交互，所以相当于我们拿到的只是一个鸡肋的root用户，为了突破这种限制，我们有特别的姿势 因为开放了ssh服务，所以我们可以使用scp，但是scp是无法创建目录的，所以我...
IPCAM Hacking Part 3 - Camera Firmware Analysis
[+]redrain//**/ 汪汪汪 Home Embedded devices hacking --IPCAM...
IPCAM Hacking Part 2 - Advanced Camera Exploitation
[+]redrain//**/ 汪汪汪 Home Embedded devices hacking --IPCAM...
IPCAM Hacking Part 1 - Network Camera Exploitation
[+]redrain//**/ 汪汪汪 Home Embedded devices hacking --IPCAM...
Crypto Miners Are Making Money With Your Money: How to Fight Them
The Rise of Cryptojacking Cryptojacking — the unauthorized use of someone else's computing resources to mine cryptocurrency — has exploded in popularity among cybercriminals. Unlike ransomware, which...
Virtual Machine Introspection in Malware Analysis
What is Virtual Machine Introspection? Virtual Machine Introspection (VMI) is a technique that allows analysis of a virtual machine's state from the hypervisor level. Unlike traditional malware...
Hide Malware Using Microsoft HTML Interpreters
Introduction Microsoft provides several HTML rendering engines and interpreters as part of the Windows operating system. Attackers have discovered that these legitimate tools can be weaponized to...
