1. Introduction While testing the organization’s user-management functionality, I identified a business-logic restriction limiting organizations to five members. Each additional member required an...
Overview Kerberos Delegation is one of the most impactful — and most misunderstood — features in Active Directory. Before you can abuse it, you need to understand why it exists, how it works techn...
🔒 SSL Pinning Bypass Deep Dive In this walkthrough, we analyze and bypass SSL certificate pinning inside an Android application using APKTool static analysis and network security config manipulat...
Machine Overview Machine Name: DarkZero Difficulty: Hard Operating System: Windows This is a write-up for the Hack The Box machine DarkZero. The machine simulates a realistic enterprise A...
💉 Gavel HTB — PDO SQL Injection to RCE 1️⃣ Initial Enumeration Starting with an Nmap scan against the target: nmap -sV 10.129.242.203 Results showed only two open ports: PORT STATE SERVICE ...
Machine Overview Machine Name: NanoCorp Difficulty: Hard Operating System: Windows This is a write-up for the Hack The Box machine NanoCorp. This challenge simulates a realistic enterprise...
🔓 Android AppLock Pattern Cracking Deep Dive In this walkthrough, we analyze how an Android AppLock application stores its pattern lock and demonstrate how to recover the original pattern throug...
🔓 Root Detection Bypass Deep Dive In this walkthrough, we analyze and bypass root detection logic inside an Android application using Frida dynamic instrumentation. We will: Analyze the root...
🎮 Frida Hooking Deep Dive we explore dynamic instrumentation on an Android game using Frida. We will: Understand what Hooking is Learn how Frida works Modify runtime values (Lives, High ...
📱 Application Overview Name: DIVA (Damn Insecure and Vulnerable App) Platform: Android Category: Mobile Application Security Focus Areas: Insecure Logging, Hardcoded Secrets, Insecure Sto...