Certified Red Team Professional (CRTP) - Review
Command Palette
Search for a command to run...
Comments
Join the discussionNo comments yet. Be the first to comment.
Writeups
Part 5 of 6
Pentest series revealing vulnerabilities found in penetration testing. Aimed at security professionals and developers, It provides insights into identifying weaknesses and exploitation techniques to enhance application security.
Mass Account takeover by bypassing 2 FA
Hey fellow hackers, I'm not gonna bore you with a long story of this pentest project. Last month I was working on a Pen-testing project and I found multiple critical & high vulnerabilities and I'll cover the interesting findings only. I won't share t...
More from this blog
Reverse Account Takeover via Email Rebinding Causing Forced Privilege De-Escalation
When we talk about account takeover, we usually imagine a familiar story: an attacker steals credentials, hijacks a session, or abuses password reset flows to log in as someone else. This write-up is about something more subtle — and arguably more da...
Jan 16, 20264 min read
Guide to install Game of Active Directory (GOAD) on VMware_ESXI
GOAD Deployment on ESXI Sphere 8 from scratch
Mar 20, 20244 min read
Exploring OSINTLEAK: Unraveling the Power of Enhanced OSINT Capabilities
Howdy mates, I wanted to write a short blog on OSINTLEAK, which is a very powerful OSINT platform. Unlike Dehashed, it has a larger database of leak contents, making it very useful for bug hunters, penetration testers, and red teamers. It offers nume...
Feb 16, 20242 min read
Hacking Admin Panel & Getting free subscription
Note: For maintaining the program's privacy I won't disclose the program. So, a few months back I and Haseeb were hunting on a private program and the program is a services-based company that has paid services only. So the program had very limited as...
Mar 29, 20234 min read
