MR X, Author At Cyber Security Research Blogs

Powershell Scripts Execute without Powershell

All Blog, AD exploitation & Post exploitation 21st March 202013th July 2021 Mr.x

In this blog, we will discover the best tool to run PowerShell scripts and commands without using powershell.exe PowerLine NPS — Not PowerShell PowerShdll PowerLessShellContinue readingPowershell Scripts Execute without Powershell

Active Directory privilege escalation cheat sheet

Windows-Pentesting, AD exploitation & Post exploitation, All Blog 23rd February 202013th July 2021 Mr.x

Recon # Systeminfo systeminfo hostname # Especially good with hotfix info wmic qfe get Caption,Description,HotFixID,InstalledOn # What users/localgroups are on the machine? net users netContinue readingActive Directory privilege escalation cheat sheet

AWAE review

All Blog 21st February 202023rd February 2020 Mr.x

Summary Layout of AWAE is similar to the PWK training. You get a PDF textbook, a collection of videos, and access to the lab. InContinue readingAWAE review

Back To The Future: Unix Wildcards Injection

All Blog, Linux privilege escalation 16th February 202013th July 2021 Mr.x

Table Of Content: ===[ 1. Introduction ===[ 2. Unix Wildcards For Dummies ===[ 3. Wildcard Wilderness ===[ 4. Something more useful… 4.1 Chown file referenceContinue readingBack To The Future: Unix Wildcards Injection

Linux Kernel Exploit list

All Blog 27th January 202013th July 2021 Mr.x

Exploit Name Kernel Start Kernel End Exploit URL hudo 2.0.0 6.0.1 https://github.com/FuzzySecurity/Unix-PrivEsc/blob/master/hudo.c ip6t_so_set(loc) 2.0.0 4.6.2 https://www.exploit-db.com/exploits/40489/ libfutex(loc) 2.0.0 2.0.0 https://www.exploit-db.com/exploits/35370/ setreuic(0,0) 2.0.0 4.0.1 https://www.exploit-db.com/exploits/14219/ tackContinue readingLinux Kernel Exploit list

SUDO-LD_PRELOAD Linux Privilege Escalation

Linux privilege escalation, All Blog 8th January 202013th July 2021 Mr.x

What is LD_PRELOAD? LD_PRELOAD is an optional environmental variable holding one or more paths to shared libraries or shared objects, the loader will load it beforeContinue readingSUDO-LD_PRELOAD Linux Privilege Escalation

RCE with log poisoning Attack Methodologies

OSCP Study material, All Blog 19th December 201913th July 2021 Mr.x

Some of the important log files are the following :- http://example.com/index.php?page=/var/log/apache/access.log http://example.com/index.php?page=/var/log/apache/error.log http://example.com/index.php?page=/var/log/nginx/access.log http://example.com/index.php?page=/var/log/nginx/error.log http://example.com/index.php?page=/var/log/vsftpd.log http://example.com/index.php?page=/var/log/sshd.log http://example.com/index.php?page=/var/log/auth http://example.com/index.php?page=/var/log/mail http://example.com/index.php?page=/var/log/httpd/error_log http://example.com/index.php?page=/usr/local/apache/log/error_log http://example.com/index.php?page=/usr/local/apache2/log/error_log It is important toContinue readingRCE with log poisoning Attack Methodologies

Author: MR X