Learn SQLi (MySQL)

Learn SQLi with examples and Docker containers to practice everything as you go. Throughout the post you will learn 3 types of SQLi: time-based, UNION-based and boolean-based

December 19, 2023 in Ciberseguridad23 minutes

Enterprise

In this writeup we solve the Enterprise machine from HackTheBox. It is a very interesting medium machine: we cover WordPress and Joomla web enumeration and SQL injections, escape from a Docker container and finally exploit a very interesting buffer overflow with the ret2libc technique

November 11, 202327 minutes

Jupiter

In today's machine we cover subdomain enumeration and turn a PostgreSQL injection into RCE. For privilege escalation we work with cron jobs, port forwarding and Python

November 1, 202315 minutes

Toolbox

October 29, 202310 minutes

Gallery

December 21, 20224 minutes