For my vulnserver TRUN exploit, I decided to use a three byte overwrite to jump to EAX.
Category Archives: Security Not Included
Boofuzz Introduction – Installation and Basic Usage
I started using Boofuzz during my OSCE work, and I wanted to share how simple it is.
Filed under Security Not Included
2018 Review for doyler.net – Here we Go Again!
Another year down, so it's 2018 review time!
Filed under Security Not Included
Man Your Battlestation! (New WFH Desk Setup)
With the busy season and holiday traveling, I figured that a lighter post about my new battlestation was in order!
Filed under Security Not Included
Custom Cryptography + OSINT (EverSec CTF @ BSidesRDU)
There was an OSINT + custom cryptography challenge during the BSidesRDU CTF this year, but no one (else) was able to solve it from start to finish.
Filed under Security Not Included
Vulnserver Introduction – Binary Exploitation Series
I'm starting my series on Vulnserver soon, so I wanted to give a brief introduction to it.
Filed under Security Not Included
Proxy Android Apps through Burp for Mobile Assessments
I've had to proxy Android apps through Burp for engagements quite a few times, and I wanted to share how simple it is.
Filed under Security Not Included
WiFi QR Code Creation for Functional Decorations
I was recently playing around with the ability to create a WiFi QR Code, and I wanted to share how easy it is.
Filed under Security Not Included
More EverSec S3 Subdomain Hijacking (BSidesRDU 2018)
There was some more S3 Subdomain Hijacking at the BSidesRDU CTF, but no one was able to solve it!
Filed under Security Not Included
SQLite Injection in the EverSec CTF (BSidesRDU 2018)
There was some neat SQLite injection during the most recent EverSec CTF, and I wanted to share my solution.
Filed under Security Not Included