Three Byte Overwrite to Exploit Vulnserver TRUN

For my vulnserver TRUN exploit, I decided to use a three byte overwrite to jump to EAX.

Continue reading

3 Comments

Filed under Security Not Included

Boofuzz Introduction – Installation and Basic Usage

I started using Boofuzz during my OSCE work, and I wanted to share how simple it is.

Continue reading

2 Comments

Filed under Security Not Included

2018 Review for doyler.net – Here we Go Again!

Another year down, so it's 2018 review time!

Continue reading

Leave a Comment

Filed under Security Not Included

Man Your Battlestation! (New WFH Desk Setup)

With the busy season and holiday traveling, I figured that a lighter post about my new battlestation was in order!

Continue reading

Leave a Comment

Filed under Security Not Included

Custom Cryptography + OSINT (EverSec CTF @ BSidesRDU)

There was an OSINT + custom cryptography challenge during the BSidesRDU CTF this year, but no one (else) was able to solve it from start to finish.

Continue reading

Leave a Comment

Filed under Security Not Included

Vulnserver Introduction – Binary Exploitation Series

I'm starting my series on Vulnserver soon, so I wanted to give a brief introduction to it.

Continue reading

Leave a Comment

Filed under Security Not Included

Proxy Android Apps through Burp for Mobile Assessments

I've had to proxy Android apps through Burp for engagements quite a few times, and I wanted to share how simple it is.

Continue reading

Leave a Comment

Filed under Security Not Included

WiFi QR Code Creation for Functional Decorations

I was recently playing around with the ability to create a WiFi QR Code, and I wanted to share how easy it is.

Continue reading

Leave a Comment

Filed under Security Not Included

More EverSec S3 Subdomain Hijacking (BSidesRDU 2018)

There was some more S3 Subdomain Hijacking at the BSidesRDU CTF, but no one was able to solve it!

Continue reading

Leave a Comment

Filed under Security Not Included

SQLite Injection in the EverSec CTF (BSidesRDU 2018)

There was some neat SQLite injection during the most recent EverSec CTF, and I wanted to share my solution.

Continue reading

Leave a Comment

Filed under Security Not Included