Latest

This ‘real world company’ exercise demonstrates what can happen if your support staff email user’s credentials in plain text. After exploiting the mail server and hunting around in user’s email, I was able to take advantage of user credentials combined with misconfigured file permissions to compromise the system.

This Minecraft themed exercise demonstrates the importance of not hard coding credentials when developing software. After discovering credentials left by a sloppy developer in a Minecraft Addon, I was able to use them to compromise the entire system. Recon nmap First thing’s first. nmap -sV -sC -oA nmap 10.