Shockz Cybersecurity, CTF’s/Pentesting and Ethical Hacking

Mr.Robot 2021 - Try Hack Me/VulnHub

September 05, 2021 10 minute read

Mr. Robot is a machine from Try Hack Me platform (Also available on VulnHub). I highly recommend you do this CTF not only because of the theme of the TV show but because it’s a good practice machine and it is an OSCP Like machine. On this machine we will have to brute force, exploit a Wordpress CMS which will be shown several ways to do so valid for the machine, perform more brute force and finally perform a privilege escalation via suid explotation.

wordpress bruteforce suid privilege-escalation web php reverse-shell wpscan hydra linux

Mr.Robot 2021 - Try Hack Me/VulnHub - Spanish Version

September 05, 2021 10 minute read

Mr. Robot es una máquina de la plataforma Try Hack Me (También disponible en VulnHub). Os recomiendo encarecidamente que hagáis este CTF no sólo por la temática del programa de televisión sino porque es una buena máquina de práctica y es una máquina OSCP Like. En esta máquina tendremos que hacer fuerza bruta, explotar un CMS de Wordpress del que se mostrarán varias formas de hacerlo válidas para la máquina, realizar más fuerza bruta y finalmente realizar una escalada de privilegios mediante explotación de suid.

wordpress bruteforce suid privilege-escalation web php reverse-shell wpscan hydra linux

Forencics Recompiler for Linux - Project

July 14, 2021 less than 1 minute read

This script will recompile most of the information that is usually obtained from a Linux system before an expert or forensic analysis. In addition all the information will be signed with SHA256.

forencics linux

Go Ports - Project

July 03, 2021 1 minute read

A fast, concurrent and multithread TCP port scanner.

golang scanner reconnaissance threading

Phonebook - Hack The Box Challenge 🔒

June 20, 2021

Phonebook is a web challenge where it is possible to take advantage of a lack of authentication of an input in a login to find out the credentials of the privileged user in the web application.

web scripting bypass decoding

Emdee Five For Life - Hack The Box Challenge

June 20, 2021 3 minute read

Emdee Five For Life is a web challenge where you will have to encrypt as fast as possible to get the flag.

web md5 cipher scripting

Breaking Grad - Hack The Box Challenge

June 18, 2021 3 minute read

Breaking Grad is a web challenge where you will have to exploit a prototype pollution vulnerability and get a rce.

web scripting nodejs prototype-pollution rce

Mr.Burns - Hack The Box Challenge

June 15, 2021 4 minute read

Mr.Burns is a web challenge where you will have to take advantage of a local file inclusion to convert it into command execution with all the functions to execute commands disabled and then obtain remote code execution by taking advantage of the mail function.

web php remote-execution rce lfi lfi-to-ce ce-to-rce

Baby Ninja Jinja - Hack The Box Challenge

June 14, 2021 3 minute read

Waf Waf is a web challenge where you will have to exploit a flask service through a jinja ssti vulnerability

web flask jinja ssti

Waf Waf - Hack The Box Challenge

June 12, 2021 2 minute read

Waf Waf is a web challenge where you will have to exploit a sqli vulnerability to ge the flag

web php sqli

Recent posts | Total: 52