exploitation - tbhaxor's Blog

exploitation

A collection of 12 posts

Process Injection using QueueUserAPC Technique in Windows

Process Injection using QueueUserAPC Technique in Windows

You will learn the fundamentals of user mode asynchronous procedure calls in this post, as well as how to use them to inject shellcode into a remote process thread to obtain a reverse shell.

Corrupting the Source Docker Image

Corrupting the Source Docker Image

In this post, we'll look at a few circumstances in which backdooring images could allow us to access a remote container.

Process Injection using CreateRemoteThread API

Process Injection using CreateRemoteThread API

CreateRemoteThread is the oldest method of process injection, and it is easily detectable. However, this establishes the foundations for process injection and code execution. This blog post will provide you with a thorough and practical explanation of how it works.

Dump Information for Process using GetTokenInformation

Dump Information for Process using GetTokenInformation

In this post, you will get a very thorough step-by-step walkthrough on building your own process token dumper in the c++ which will help you in knowing your target better before launching another post exploitation attack.

Windows Process Listing using NTQuerySystemInformation

Windows Process Listing using NTQuerySystemInformation

Get acquainted with the undocumented low-level yet powerful APIs from winternls and how to use the NtQuerySystemInformation function to get a list of all the processes running in the system

Windows Process Listing Using PSApi

Windows Process Listing Using PSApi

Get a detailed walkthrough on process listing via PSApi. You will also learn about its pros-n-cons and the new set of functions from the PS Api suite related to module enumeration.

Windows Process Listing using ToolHelp32 API

Windows Process Listing using ToolHelp32 API

Get a detailed walk-through on the code of process listing using ToolHelp32 API from scratch. You will also learn to enumerate the threads and modules for each process and will know about its advantages and challenges

Exploit WebDAV using Metasploit

Exploit WebDAV using Metasploit

WebDAV is an extension to the HTTP protocol that allows users to upload, move or change the documents on the server via HTTP verbs. In this post learn how to exploit WebDAV using Metasploit

Container Host Breakout – Part 1

Container Host Breakout – Part 1

Understand how the docker demon running on the remote system or managed service like portainer could be a security risk that should be avoided to prevent the entire infrastructure take over

Exploiting Vulnerable Application for Privilege Escalation

Exploiting Vulnerable Application for Privilege Escalation

In this, you will learn how a known vulnerability in a third-party application installed on a Linux system could help attackers to escalate to root privileges

Exploiting SUID Binaries to Get Root User Shell

Exploiting SUID Binaries to Get Root User Shell

Learn how you can find and exploit unusual SUID binaries to perform horizontal and then vertical privilege escalation to get a privileged shell and read the files

Exploiting File Permissions Misconfigurations

Exploiting File Permissions Misconfigurations

In this post, you will learn how misconfiguration in file permission can lead to privilege escalation via practical demonstration of 2 attack defence labs