how frequently does the letter "g" appear in:
a beginner’s friendly approach for oscp ,ctfs and web app pen-testing.
this article will describe the basics of web enumerations and is aimed at beginners. it starts with basics and then gradually build up to more advanced techniques.
python is best at doing these kind of things and provides modules likes requests and beautifulsoup to send web request and website scrapping.
another easy boot2root room. we first needed to enumerate a bit to find out what is running and then doing directory brute forcing to find a sqlite3 db dump, which gave us the admin password.then using that password we logged in to the admin portal where there was a xxe vulnerability which was exploited to give us the user’s ssh encrypted key which was cracked with ssh2john. privesc involved exploiting a suid binary.
i made a forum where you can post cute cat pictures!
this is a write-up for tryhackme’s room named cat pictures. we first needed to find out the port where the web-server is running, which while navigating gave us a hint to perform port-knocking.then we needed to do a bit of binary reversing and then a nice privesc from a docker environment.
so lets start with the next level.
this is a write-up from the next 10 levels(11–20) of otw’s wargame named bandit. please read level 0 to 10 write-up first from here.
this will be a write-up of bandit and you need to solve a level to move forward to the next level. so let’s begin.
just ssh in to bandit box for level 0 using username/password: bandit0/bandit0.
this is a quick review of comptia’s new pentest+ exam pt0-002 which is the latest offering on their pentest+ series. well version 2 is not officially launched yet and i took the beta exam which is code named pt1-002.
what is john’s password?
software developer having keen interest in security, privacy and pen-testing. security+ certified.
user
The text includes 28 "g"s in total.
assistant