Windows Kernel Exploitation – HEVD x64 Stackoverflow
xct2022-07-02T12:41:58+00:00After setting up our debugging environment, we will look at HEVD for a few posts before diving into real-world scenarios. HEVD is an awesome, intentionally vulnerable driver by HackSysTeam that allows exploiting a lot of different kernel vulnerability types. I think this one is great to get started because...
Windows Kernel Exploitation – VM Setup
xct2022-07-01T10:07:01+00:00In this series about Windows kernel exploitation, we will explore various kernel exploit techniques & targets. This short first part will deal with the VM setup for the rest of the series.
Bypassing DEP with VirtualProtect (x86)
xct2022-06-14T19:15:39+00:00In the last post we explored how to exploit the rainbow2.exe binary from the vulnbins repository using WriteProcessMemory & the "skeleton" method. Now we are going to explore how to use VirtualProtect and instead of setting up the arguments on the stack with dummy values and then replacing them, we...
Bypassing DEP with WriteProcessMemory (x86)
xct2022-06-14T19:12:46+00:00In this post I will show an example on how to bypass DEP with WriteProcessMemory. This is a bit more complicated than doing it with VirtualProtect but nonetheless an interesting technical challenge. For the target binary I will use rainbow2.exe from my vulnbins repository.
ASP, Windows Containers, Responder & NoPAC – Anubis @ HackTheBox
xct2022-06-14T08:23:04+00:00We are solving Anubis, a 50-point windows machine on HackTheBox which involves an ASP template injection, windows containers, and stealing hashes with Responder. Later we'll escalate privileges using noPAC.
SSRF & Python Debugger – Forge @ HackTheBox
xct2022-06-14T08:30:23+00:00We are solving Forge, a medium difficulty Linux machine on HackTheBox which involves an SSRF & playing with the python debugger.