red-team - tbhaxor's Blog

red-team

A collection of 14 posts

Process Injection using QueueUserAPC Technique in Windows

Process Injection using QueueUserAPC Technique in Windows

You will learn the fundamentals of user mode asynchronous procedure calls in this post, as well as how to use them to inject shellcode into a remote process thread to obtain a reverse shell.

Corrupting the Source Docker Image

Corrupting the Source Docker Image

In this post, we'll look at a few circumstances in which backdooring images could allow us to access a remote container.

Interacting with Protected Docker Registry

Interacting with Protected Docker Registry

In this post, you will learn how to interact with the HTTP Basic Auth protected docker registry and cracking password with the hydra tool.

Hunting Secrets from Containers by Analysing Docker Images

Hunting Secrets from Containers by Analysing Docker Images

Docker images are used to create containers and contain some secrets that can be extremely useful when exploiting applications. In this post, you will learn how to search for such information in Docker images or Dockerfiles in order to gain unauthorised access.

Exploiting Insecure Docker Registry

Exploiting Insecure Docker Registry

Assume you're in a situation where you can't use Docker. How would you use the remote registry to get image FS layers? This guide will walk you through using simply the curl command to interface with the Docker registry.

Reading and Writing into Process's Memory

Reading and Writing into Process's Memory

Get the basic understanding on the remote process memory read and write all by windows 32 API and create your own game hacks.

Dump Information for Process using GetTokenInformation

Dump Information for Process using GetTokenInformation

In this post, you will get a very thorough step-by-step walkthrough on building your own process token dumper in the c++ which will help you in knowing your target better before launching another post exploitation attack.

Cracking Zip Password using Python 3 and Multithreading

Cracking Zip Password using Python 3 and Multithreading

Learn the basics of a multithreading program using python 3 and how to crack a zip file password efficiently in a gamified manner.

Cracking Zip Password using Python3

Cracking Zip Password using Python3

Get a thorough knowledge of python's zipfile module and build your own Zip file password cracking tool in less than 3 minutes

Windows Process Listing using NTQuerySystemInformation

Windows Process Listing using NTQuerySystemInformation

Get acquainted with the undocumented low-level yet powerful APIs from winternls and how to use the NtQuerySystemInformation function to get a list of all the processes running in the system

Windows Process Listing Using PSApi

Windows Process Listing Using PSApi

Get a detailed walkthrough on process listing via PSApi. You will also learn about its pros-n-cons and the new set of functions from the PS Api suite related to module enumeration.

Windows Process Listing using ToolHelp32 API

Windows Process Listing using ToolHelp32 API

Get a detailed walk-through on the code of process listing using ToolHelp32 API from scratch. You will also learn to enumerate the threads and modules for each process and will know about its advantages and challenges

Windows Process Listing Using WTS API – Part 2

Windows Process Listing Using WTS API – Part 2

In this post, you will learn how to gracefully enable SeDebugPrivilege and automatically launch the process using ShellExecuteExA with administrator privileges. This is in continuation to part 1 of windows process listing using wts api.

Windows Process Listing Using WTS API – Part 1

Windows Process Listing Using WTS API – Part 1

In this detailed walkthrough of process listing using WTS API, you will learn the importance of the process listing and enumeration of anti-malware agents and will get your hands dirty with the source code