Windows AD CS exploitation for Red Teaming practise with ESC4

Exploit daloRADIUS & Mosh

Exploit the vfork() function call debugging parent/child processes

RCEs for LimeSurvey & HashiCorp Consul

Exploit Ghost CMS 5.58.0 CVE-2023-40028 after a Git leak

Zabbix CVE-2024-36467 (JSON RPC IDOR) & CVE-2024-42327 (SQLi)

This note covers advanced GDB debugging with demo code

Red team exploitation on some pre-Windows 2000 “old” machine.

Classic XSS + LFI exploit combination

Extract information from a Blockchain in Web3 & exploit Foundry cmds