In this post I’ll explain the process I took to complete the Blue machine on TryHackMe.

I’m Subhadip Sardar, a cybersecurity enthusiast with a strong foundation in IT and cybersecurity. I’m passionate about sharing knowledge…

SMBGhost, SMBleedingGhost, and ColoranBlue are all names used to describe the same vulnerability, officially identified as CVE-2020–0796.

An introduction to the main components of the Metasploit Framework.

This room will introduce the basic concepts and functionality provided by Active Directory.

Using Metasploit for scanning, vulnerability assessment and exploitation.

Deploy & hack into a Windows machine, leveraging common misconfigurations issues.

Take a deep dive into Meterpreter, and see how in-memory payloads can be used for post-exploitation.

Leveraging Token Impersonation for Elevated Access in Windows

While researching how to exploit Apache Tomcat using a WAR file, I came across this helpful Medium post. Following its approach, I generated a malicious .war reverse shell using msfvenom, then…

Here’s a quick walkthrough of the SecNotes machine from Hack The Box.

I recently did a TryHackMe room which require abusing SEImpersonate Token to escalate privileges to become System. I tried various Potato…

Friendly access