Cybersecurity
Passkey Editor: a Burp Suite Extension for Attacking WebAuthn
An introduction to Passkey Editor, the Burp Suite extension that unwraps WebAuthn traffic into an editable view and automates ceremony-layer attacks. Published on the Anvil Secure blog.
Demystifying Passkeys Under the Hood: The Architecture
A look at passkey architecture: device-bound vs synced credentials, the three authenticator categories, and real-world deployment pitfalls like magic link fallbacks and signature counters. Published on the Anvil Secure blog.
Demystifying Passkeys Under the Hood: The Protocol
A deep dive into the WebAuthn/CTAP protocol that powers passkeys, breaking down what actually happens on the wire during registration and authentication. Published on the Anvil Secure blog.
Optimum
HackTheBox Optimum machine writeup.
OSCP Prep
A collection of HackTheBox machine writeups completed during OSCP preparation.
Forest
HackTheBox Forest machine writeup. AS-REP Roasting, BloodHound path, DCSync to Domain Admin.
Conceal
HackTheBox Conceal machine writeup. SNMP leaks IKE VPN PSK, IPsec tunnel setup, ASP webshell, JuicyPotato SYSTEM.
Active
HackTheBox Active machine writeup. GPP password decryption + Kerberoasting to Domain Admin.
Magic
HackTheBox Magic machine writeup. SQL injection login bypass, double-extension PHP webshell upload, SUID binary PATH hijacking.
Grammy
HackTheBox Granny machine writeup. IIS 6.0 WebDAV MOVE method bypass + Token Kidnapping privilege escalation.
Brainfuck
HackTheBox Brainfuck machine writeup. WordPress auth bypass, SMTP credentials pivot, Vigenère cipher, RSA root flag.
Shocker
HackTheBox Shocker machine writeup. ShellShock (CVE-2014-6271) via CGI bash script, sudo perl privesc.
Lame
HackTheBox Lame machine writeup. Samba 3.0.20 username map script RCE and distcc CVE-2004-2687.
FriendZone
HackTheBox FriendZone machine writeup. DNS zone transfer, SMB credentials, LFI via pagename parameter, Python library hijacking.
Legacy
HackTheBox Legacy machine writeup. Windows XP with SMBv1 — MS08-067 and EternalBlue exploits.
Jerry
HackTheBox Jerry machine writeup. Apache Tomcat with default credentials, WAR file upload to SYSTEM.
PageBuster: Stealthily Dump All the Code Ever Executed
A kernel module infrastructure to stealthily dump executable pages of packed processes at runtime. Published on the rev.ng blog.