Your company should have some sort of written policy as it relates to the particular behavior or activity the employee is engaged in

Create a single-page document

Be as brief as possible

Communicating with the Employee

Meet with the employee

Ask the employee to sign and date the document

File a copy of the information in the employee's personnel file

Conclusion

Start of recon identifying a debian box based upon banners

Taking a look at the website, has warnings about DOS type attacks.

Discovering the /writeup/ directory in robots.txt

Checking the HTML Source to see if there's any information about what generated this page. Discover CMS Made Simple

CMS Made Simple is an opensource product. Search through the source code to discover a way to identify version information.

Using SearchSploit to find an exploit

Running the exploit script with a bad URL and triggering the servers anti-DOS protection

Running the exploit script with correct URL and analyze the HTTP Requests it makes via Wireshark to see how the SQL Injection works

Explaining how password salts work

Using Hashcat to crack a salted md5sum

Demonstrating the --username flag in hashcat, this allows you to associate cracked passwords to users

Begin of low-priv shell, running LinEnum to discover we are a member of staff

Using google to see what the Staff group can do (edit /usr/local/bin)

Explaining path injection

Using PSPY to display all the processes that start on linux, useful for finding crons or short-running processes

Running PSPY to see run-parts is called without an absolute path upon user login

Performing the relative path injection by creating the file /usr/local/bin/run-parts which will drop our SSH Key

Intro

Why You Need a Process Write-Up

The Process Write-Up

Process Write-Up Sections

The Overview

Write the Title

Add the Cover Photo

Write the Summary

Add Bullet Points

Add the Button

The Problem

The Solution

Write the Process

Write the Results

Process Write-Up Tips

Justify your Decisions

Keep it Straightforward

Incorporate Screenshots

Conclusion

Intro

intro/Skilift

intro/ARISAI

intro/Los-ifier

intro/My First Website

web/Glacier Exchange

web/Peak

web/WhereIsTheScope

pwn/FunChannel

pwn/Glacier Rating

Outro/Demo

Win Function

Relative Offset

Solve Script

Random Rbp Addresses

Pliki .swp

Pliki robots.txt

Z jakich technologii korzysta strona

Exploit Database

Blind SQL Injection

Solenie haseł

Hashcat

Grupa staff w Linuxie

Zmienna PATH

etc/profile

Lista uruchomionych procesów

pspy

Reverse Shell w Perl

Introduction

7 step summary

Step 1 - define the research question

Step 2 - develop the review protocol

Step 3 - conduct the search

Step 4 - scan for eligibility

Step 5 - analyse quality

Step 6 - extract and synthesise data

Step 7 - write the report

Introduction

Introducing TheRealBrenu

LovelyKittenPictures 1

LovelyKittenPictures 2

LovelyKittenPictures 3

LovelyKittenPictures 4

Interview with TheRealBrenu

Start

Intro

Start Here

Port Scan (rustscan)

File Scan (feroxbuster)

webdav

Default Creds

Hash Cracking (hashcat) + cadaver

Reversse Shell (revshells.com)

We're In! Let's Upgrade Shell

PrivEsc

Outro

Exploring the web application

Exploring assets

Using sudo to get root flag

Conclusion