Advanced Linux Persistence Mechanisms and Incident Response Techniques
Common persistence and privilege retention methods include:
Scheduled tasks and cron job backdoors
Dynamic library hijacking
Malicious shared object injection
SSH key-based authentication abuse
Port multiplexing techniques
SSH symbolic link backdoors
Privilege retention tactics
Passwordless user accounts
Rootkit deployment
Port Multiplexing
S ...
Posted on Thu, 10 Sep 2026 16:37:22 +0000 by shiny_spoon
Active Directory Privilege Escalation via Critical CVE Exploitation and Misconfiguration
Kerberos PAC Validation Bypass (CVE-2014-6324)
This vulnerability exploits improper validation of the Privilege Attribute Certificate (PAC) during Kerberos ticket-granting requests. Successful execution requires valid credentials for a standard domain account combined with local administrative privileges on any domain-joined workstation. The at ...
Posted on Sun, 06 Sep 2026 16:51:49 +0000 by douceur
Oracle Database Privilege Escalation and Command Execution Techniques
Database Enumeration
Before attempting any escalation, it is critical to understand the current context and permissions available within the database envirnoment.
Identifying Current Privileges
To view the roles granted to the current user, query the session roles:
SELECT * FROM session_roles;
Determining Database Version
Identify the specific ...
Posted on Thu, 03 Sep 2026 16:40:39 +0000 by fredley
Jenkins CMS Penetration Testing via Cron Job Exploitation
Target Setup
Download the target machine image from:
https://download.vulnhub.com/jarbas/Jarbas.zip
Configure the virtual machine in NAT mode to reside on the same subnet as the attacking system.
Attacker IP (Kali): 192.168.88.133
Information Gathering
Host Discovery
Perform subnet scanning to identify active hosts:
sudo nmap -sn 192.168.88.0/2 ...
Posted on Sun, 26 Jul 2026 16:13:39 +0000 by pedroz
DC-6 Vulnhub Machine Exploitation
Environment Setup
Download the target machine from Vulnhub DC-6.
Import the target into Oracle VM VirtualBox, set network to Host-Only, and ensure the network adapter matches the Kali machine.
Start the target machine.
Penetration Process
Use nmap for host discovery:
nmap -sn 192.168.56.0/24
Port scanning with nmap:
nmap -sS 192.168.56.111
...
Posted on Wed, 13 May 2026 04:19:08 +0000 by aviavi
Using Burp Suite to Penetrate a System and Escalate Privileges via CVE-2021-3156
0x01 Reconnaissance and Initial Access
The challenge started with a login page. Directory scanning revealed no other entry points. Brute-forcing weak credentials seemed like the obvious approach, but without knowing the username policy, blindly attempting logins could trigger protective measures and expose or block our IP.
Observing a "Reg ...
Posted on Sat, 09 May 2026 00:47:15 +0000 by projectshifter