jamarir

jamarir

5 followers

Just another infosec blog. Why ? Because teaching oneself is the best way to learn. Only hack your own/allowed environments.

[HackTheBox] Bastion

Dec 20, 202415 min read

Just another VHD Mountage / SAM Decryption / Quick AMSI Bypass / mRemoteNG Password Decryption Write-up Machine link. IppSec...

[HackTheBox] Bastion

[HackTheBox] Resolute

Dec 15, 202410 min read

Just another Null RPC / Password Spray / PowerShell Transcript Leak / DnsAdmins Privesc / CreateThread Stealthiness Write-up. Machine link. Ippsec...

[HackTheBox] Resolute

[HackTheBox] Blackfield

Dec 8, 202434 min read

Just another Anonynous-Guest / ASREPRoast / ForceChangePassword / UserEnum / LSASS / Registry Hive / NTDS_SAM-SYSTEM Decryption Write-up. There might...

[HackTheBox] Blackfield

[OWASP MASTG] Android - DIVA (Damn Insecure and Vulnerable App)

Dec 1, 202431 min read

Just another Lab Setup / ADB / JADX / Apktool / Frida / Logcat / Native Lib / Insecure Storage / Input Validation / Access Control Write-up. Github...

[OWASP MASTG] Android - DIVA (Damn Insecure and Vulnerable App)

[HackTheBox] Forest

Nov 24, 202413 min read

Just another RPC / Port ranges / NTLMSSP / ASREPRoast / User DACL Abuse (RPC passwd) / DCSync Write-up. There might be some discrepencies in this...

[HackTheBox] Forest

[HackTheBox] Sauna

Nov 10, 202428 min read

Just another ASREPRoast / WinRM / Autologon / NTDS.dit / NC / Replication Topology / PsExec / SAM LM:NT / DCSync Write-up. You may register the...

[HackTheBox] Sauna