Search for a command to run...
For the longest time, I've been exploring various Linux distributions, each with its unique strengths and quirks. After much experimentation, I鈥檝e found my sweet spot with Manjaro Linux. Here鈥檚 why it鈥檚 become my daily driver and how it seamlessly co...
In the vast landscape of software development, it's easy to get caught up in the debates about which programming language reigns supreme. However, it's crucial to remember that programming languages are just tools鈥攅ach with its own strengths and weak...
I recently had the opportunity to dive down into Hashicorp's Nomad and Kubernetes. We are looking into replacing a manually provisioned setup that is currently configured by Salt. While Salt already offers us easy deployment and configuration of all ...
In this post we solve a few easy challenges on pwnable.kr called cmd1 and cmd2 cmd1 and cmd2 These two challenges required us to circumvent a cleared PATH environment variable. cmd1 In the first challenge, the program has a small filter, that doesn't...
In this post we solve the lotto challenge of pwnable.kr. lotto The challenge starts by inviting us to play a game of chance Mommy! I made a lotto program for my homework. do you want to play? ssh lotto@pwnable.kr -p2222 (pw:guest) Inspecting the co...
Capture The Flag competitions usually require a set of tools to help you analyze, reverse engineer and exploits challenges. My CTF Team has therefore created a docker image containing the bare essentials that we use while running challenges in "isola...
As python is becoming more and more popular, so is it's ecosystem and frameworks. Django is a popular web application framework for python, which has a great MVC architecture, comes with existing user management and a ton of plugins. As with almost a...
SQL Injection can sometimes be as simple as '0 UNION SELECT * FROM users;-- and suddenly you end up with a dump of the users table in a web application. But what happens when your output isn't reflected back to you? Can we still exploit the unvalidat...
I recently wrote a small piece at work, regarding the commercial benefits of utilizing Open Source Software. It was meant to be easy digestible, without dwelling too much on technical details. Enjoy. Django and user management in large corporations A...