Using Burp Suite to Penetrate a System and Escalate Privileges via CVE-2021-3156
0x01 Reconnaissance and Initial Access
The challenge started with a login page. Directory scanning revealed no other entry points. Brute-forcing weak credentials seemed like the obvious approach, but without knowing the username policy, blindly attempting logins could trigger protective measures and expose or block our IP.
Observing a "Reg ...
Posted on Sat, 09 May 2026 00:47:15 +0000 by projectshifter
Operational Guide to Network Security Assessment using Kali Linux
Infrastructure Deployment and Lab Preparasion
Establishing a robust environment is the foundation of any security audit. Kali Linux provides various deployment options tailored for cloud, containerized, and mobile environments.
Cloud Implementation via Amazon AWS
Deploying Kali on Amazon EC2 allows for external penetration testing from a stable ...
Posted on Thu, 07 May 2026 10:11:30 +0000 by jalbey
JWT Security: A WebGoat Challenge Walkthrough
Cookie (Stored in Browser)
A cookie is a specific piece of data that is permanently stored in the browser. It is merely a data storage functionality implemented by browsers. Cookies are generated by the server, sent to the browser, and saved as key-value pairs in a text file within a directory on the client. On subsequent requests to the same w ...
Posted on Thu, 07 May 2026 05:24:52 +0000 by marcela1637