
Digital Threats
How attackers upped their game to fit the Cyberspace

A few questions about cloud computing

This is a writeup for the Skynet room, available on the TryHackMe. Today we will see privilege escalation using wildcard injection: crafting manipulated filenames, an attacker can insert parameters into commands that are run by other users, such as t...

This is a writeup for the Dogcat room, available on TryHackMe. Log Poisoning is a well-known method for exploiting a Local File Inclusion (FLI) vulnerability to gain a reverse shell. The attacker attempts to insert malicious input into the server lo...

This is a writeup for the Relevant room, available on TryHackMe. Today's system vulnerability is based on Token Impersonalization. In order for this to work, we need a tool that uses a named pipe to deceive an NT AUTHORITY\SYSTEM account into connect...

A high-level overview of cybersecurity terminology

The Unintended Way?