Jan 30Stock Manipulation By Exploiting Serverless Cloud ServicesIn this article, we will be trying to understand an infamous exploitation technique and how attackers can make companies potentially incur losses in millions for any organization using serverless computing with ANY public cloud vendor. …Stock Market10 min readStock Market10 min read
Jan 22, 2021Evolution of Return Oriented ProgrammingBefore we begin understanding Return Oriented Programming let's first understand the need for Return Oriented Programming. The Need for Return Oriented Programming Let's First Kick off with the most basic buffer overflow technique used in exploiting the machines. The main idea in any of the exploit development is to somehow compromise the system, we use different…Security16 min readSecurity16 min read
Jul 25, 2019Gaining SYSTEM in any Windows boxAs enticing as the topic of today’s article is, we will be understanding the underlying concepts of how one becomes NT AUTHORITY/SYSTEM by just executing Getsystem (Incase one has a meterpreter foothold) or PowerUp(PowerSploit Module), in a nutshell — Debunking the magic Meterpreter performs to get you the highest privileged…Technology5 min readTechnology5 min read
Jul 21, 2019Scanning vulnerable Docker imagesTalking about red teaming and scanning images for vulnerabilities inside a containerized environment is a very tedious task at hand. Lets first talk and understand what would we do conventionally? Well, I for one would first start scanning each application running as a service inside the container. I would then…Docker4 min readDocker4 min read
