Pentesting APIs - Part I: Introduction & Enmumeration

The first part of the series on performing a penetration test on APIs, this part covers a general introduction on APIs and enumerating APIs during a penetration test of a bug bounty!

CozyHosting - Hack the Box (CTF)

A writeup about the CozyHosting Capture the Flag challenge on Hack the Box, a recently retired machine in which you abuse Spring Boot and gain access to this Linux machine.

Devel - Hack the Box (CTF)

A writeup about the Devel Capture the Flag challenge on Hack the Box, an easy box that focusses on a FTP misconfiguration and kernel exploit to fully compromise the machine.

EPSS for Offensive Security

An article on how the Exploit Prediction Scoring System (EPSS) model can be used during offensive security engagements such as penetration tests and red teaming!

The World of Wordlists

An article on how to make the most out of custom password wordlists and how to customize them perfectly for the targets in your assessments!

Optimum - Hack the Box (CTF)

A writeup about the Optimum Capture the Flag challenge on Hack the Box.

Jerry - Hack the Box (CTF)

A writeup about the "Jerry" Capture the Flag challenge on Hack the Box.

MonitorsTwo - Hack the Box (CTF)

A writeup about the MonitorsTwo Capture the Flag challenge on Hack the Box.

Busqueda - Hack the Box (CTF)

A writeup about the Busqueda Capture the Flag challenge on Hack the Box.

Hacking the Internet of Things (IoT)

An article on Shodan.io, the way it works and some interesting and useful queries for red team engagement and security researchers looking to kick off their Shodan adventures!

Legacy - Hack the Box (CTF)

A writeup about the Legacy Capture the Flag challenge on Hack the Box.

Lame - Hack the Box (CTF)

A writeup about the Lame Capture the Flag challenge on Hack the Box.

Blue - Hack the Box (CTF)

A writeup about the Blue Capture the Flag challenge on Hack the Box.