https://sleepy-student.co/blog daily 1.0 2022-09-05 https://sleepy-student.co/blog/what-is-typosquatting monthly 0.5 2022-06-22 https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/b78a377c-fd47-4ee9-97a6-532103db1fda/unsplash-image-qDbnNDF2jZ4.jpg Blog - What is Typosquatting? - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1653710993070-AC9WS6QNOHVUXZ2GFBL4/unsplash-image-TaOGbz_S-Qw.jpg Blog - What is Typosquatting? - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1653709509405-RWPMY8T0S5DL0PSAGS4A/unsplash-image-AoqgGAqrLpU.jpg Blog - What is Typosquatting? - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1653709761651-OAKM5WRFISDWIKBHI5LD/unsplash-image-KzeOMdcEswk.jpg Blog - What is Typosquatting? - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://sleepy-student.co/blog/jwts monthly 0.5 2022-05-26 https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/50e59743-ae4f-43e1-bc8c-e0da0ab85fc7/successful-none-burp.png Blog - JSON Web Tokens(JWT) - Make it stand out Requests Alg:none Attack From jwt_tool https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/dbb6d69a-145f-4dfb-8091-885edd349602/admin-algnone.png Blog - JSON Web Tokens(JWT) - Make it stand out Forge Admin Token Exploitation https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/8674e7ec-bfda-4d20-a73e-a073caaeebff/Screen+Shot+2022-05-24+at+5.03.27+PM.png Blog - JSON Web Tokens(JWT) - Make it stand out JuiceShop Landing Page https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/533ee899-dd28-4975-baab-ad26d4f4a09f/claims-admin.png Blog - JSON Web Tokens(JWT) - Make it stand out Forged Admin JWT https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/ef833281-a213-4d9e-a732-44ff109af417/web-decoded-jwt.png Blog - JSON Web Tokens(JWT) - Make it stand out Decoded JWT https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/d48e2a5a-9459-4b54-9912-45f4382bf987/alg-none-attack.png Blog - JSON Web Tokens(JWT) - Make it stand out Alg:none Attack https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/d4d1e02f-dbe3-4936-aba7-238e760a6745/tampered-jwt-1.png Blog - JSON Web Tokens(JWT) - Make it stand out Tamper Token Result https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/5b826ae0-d3ab-4e9d-9dba-5be7df316d61/decoded-t-none.png Blog - JSON Web Tokens(JWT) - Make it stand out Decoded Tampered Token https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/e0cf9497-386b-40d2-942c-d6c38544d220/fakeuser-claims.png Blog - JSON Web Tokens(JWT) - Make it stand out Tampered Claims Fake User Account https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/80d94e63-b299-4331-9e14-37195d2b8b54/fakeuser-burp.png Blog - JSON Web Tokens(JWT) - Make it stand out Result of Forged Token for Fake User Exploit https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/92f1f66c-f3bd-4900-8628-b85f528f4bc7/adminrev.png Blog - JSON Web Tokens(JWT) - Make it stand out Admin Review https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/ce4ee5ce-331c-4554-9348-f23a49cf1885/burp-adminnone.png Blog - JSON Web Tokens(JWT) - Make it stand out Forged Admin Token Request/Response https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/07f48e1c-7cb0-40a0-a792-a946af12c814/Screen+Shot+2022-05-24+at+7.53.03+PM.png Blog - JSON Web Tokens(JWT) - Make it stand out Example JWT https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/bd9d38f7-0696-4a17-b6eb-64e38c601faa/fakeuser-attack.png Blog - JSON Web Tokens(JWT) - Make it stand out Tampered Claims Exploit https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/c51fff26-a746-4fb4-a05e-4f684845afc4/decodedJWTvalid.png Blog - JSON Web Tokens(JWT) - Make it stand out Decoded JWT https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/dda42e4e-6d90-4862-b718-551aa160a72e/tamper-none.png Blog - JSON Web Tokens(JWT) - Make it stand out Jwt_tool Tamper Token https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/8f0db484-27d6-49d4-81ec-b1a5a498e0ec/Screen+Shot+2022-05-24+at+7.16.11+PM.png Blog - JSON Web Tokens(JWT) - Make it stand out Request With Valid JWT https://sleepy-student.co/blog/sqli monthly 0.5 2022-04-24 https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/2becf9fd-a877-4bb5-b961-61fc863fa804/unsplash-image-x1_gmkEbsM4.jpg Blog - I Wrote Vulnerable Code - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/e41d1655-8538-4ad3-ae1e-911c6aef13b8/Screen+Shot+2022-03-04+at+5.38.39+PM.png Blog - I Wrote Vulnerable Code - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/cae74502-502a-412b-aa2d-f99dace389a7/Screen+Shot+2022-03-04+at+5.39.06+PM.png Blog - I Wrote Vulnerable Code - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/df30bcdd-4be8-4f3d-a654-05f1f253d45e/Screen+Shot+2022-03-04+at+5.11.49+PM.png Blog - I Wrote Vulnerable Code - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/9efe264d-8a29-4597-8b02-5c79eb81b323/Screen+Shot+2022-03-04+at+6.07.08+PM.png Blog - I Wrote Vulnerable Code - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/61019465-8e6c-4423-8a4e-524d756e3e7c/Screen+Shot+2022-03-04+at+5.55.06+PM.png Blog - I Wrote Vulnerable Code - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/9b2334a5-bd34-47c2-8baf-05beca186224/Screen+Shot+2022-03-04+at+6.09.21+PM.png Blog - I Wrote Vulnerable Code - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/057e4063-1c45-49ff-9981-20b0f81a64b1/Screen+Shot+2022-03-04+at+4.46.11+PM.png Blog - I Wrote Vulnerable Code - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/5ee14c56-5626-45e3-a1ec-f99d5212ff98/Screen+Shot+2022-03-04+at+5.10.12+PM.png Blog - I Wrote Vulnerable Code - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/dd52c32f-d83c-4970-8962-617fda5f6fd1/Screen+Shot+2022-03-04+at+6.04.35+PM.png Blog - I Wrote Vulnerable Code - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/f53c94b2-6d2f-4ce5-b1ba-647d08290e96/Screen+Shot+2022-04-01+at+4.55.19+PM.png Blog - I Wrote Vulnerable Code - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/2ae67fcf-6b60-4543-a8d1-b04ccb197bc3/Screen+Shot+2022-03-11+at+2.40.57+PM.png Blog - I Wrote Vulnerable Code - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://sleepy-student.co/blog/domain-categorization monthly 0.5 2022-06-25 https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/f77b0e1b-fd8b-4022-b924-7c6e75f3f7be/domainPalo.png Blog - Domain Categorization - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/d12ccc0a-fc38-413d-8831-625e9a0ce4b2/301.png Blog - Domain Categorization - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://sleepy-student.co/blog/how-to-get-started-with-microsoft-graph-api monthly 0.5 2022-02-22 https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/3e218acc-a1a6-4175-8d9c-4d47bc29bda0/imports.png Blog - How To Get Started With Microsoft Graph API - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/92387b11-faf6-4f5e-8570-b6bfdfa0cfff/adaptive-cards.png Blog - How To Get Started With Microsoft Graph API - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/f5436423-c20b-4a18-adb7-34eb0ac52d47/code-snips.png Blog - How To Get Started With Microsoft Graph API - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/dd6f48fd-de42-4967-b675-fc75bbbb85a7/get-perms.png Blog - How To Get Started With Microsoft Graph API - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/3e204de4-843a-4830-835f-c34cde10431e/new-reg.png Blog - How To Get Started With Microsoft Graph API - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/94df5297-eb49-4b5b-9db2-8f72b17b848c/group-perms.png Blog - How To Get Started With Microsoft Graph API - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/b7e81a84-72d9-4301-9adc-d43a6760af6b/query-groups.png Blog - How To Get Started With Microsoft Graph API - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/f97a6975-7a3c-4040-b182-e008d175388a/get-secret.png Blog - How To Get Started With Microsoft Graph API - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/5ad3359c-4a16-43dc-9e0c-3b3a344114a7/yaml.png Blog - How To Get Started With Microsoft Graph API - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/bca6eea5-f8ba-4546-ae99-0c28427944d6/explorer-perms.png Blog - How To Get Started With Microsoft Graph API - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/5c161111-ff17-42d8-80fa-60569f114078/maingo.png Blog - How To Get Started With Microsoft Graph API - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/b8c40b86-92e1-4762-8cbf-d9b0c98b524b/config-client.png Blog - How To Get Started With Microsoft Graph API - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/5d5ee85f-bce6-49db-9da9-9580961314b5/results.png Blog - How To Get Started With Microsoft Graph API - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://sleepy-student.co/blog/cap-walkthrough monthly 0.5 2022-02-16 https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1631306689574-T86SDDKM3L66SXQY0QCX/ssh-pw.png Blog - Cap Walkthrough - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1631306255320-GML8G0WI9W8G7YY1WO5F/pcap3.png Blog - Cap Walkthrough - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1631306407950-A4YCCHQIENJOVPSWN1VL/wireshark.png Blog - Cap Walkthrough - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1631306010667-IMO2N02TC1O3FUSL55NL/ip.png Blog - Cap Walkthrough - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1631306496977-PF2SRJ8RQYO0RS1N65Q9/ftp-userflag.png Blog - Cap Walkthrough - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1631306144753-ZD2JGUHVBCADZ3XSV62G/net-connects.png Blog - Cap Walkthrough - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1631306279475-1QNK8950I8IY8NCUR5NI/tcp-flow-pcap3.png Blog - Cap Walkthrough - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1631305911449-Q89OTM5OH47N4RGX2KEX/another-dashboard.png Blog - Cap Walkthrough - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1631306891342-OBZZXRCSV9KP906NBX7O/caps-root.png Blog - Cap Walkthrough - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1631306815332-VKV3ZI4HLUKQ4XTNVXO7/suid-perms.png Blog - Cap Walkthrough - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1631306218515-26JOZFD6P9NKSS2NTV3N/pcap-tab.png Blog - Cap Walkthrough - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1631305874927-V47TQCXLDPLTRSEUR7X2/nmap.png Blog - Cap Walkthrough - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1631306653951-4WF13JDY731YZ1S9UBYE/grep-user-pcap.png Blog - Cap Walkthrough - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1629648784826-6UF5THJUM6GK84UALS6P/info-card.png Blog - Cap Walkthrough - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://sleepy-student.co/blog/getting-started-with-covenant monthly 0.5 2021-08-23 https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1622425685819-7G0BAE9GSQ6CQG5SRARB/create-listener.png Blog - Getting Started With Covenant - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1622426012562-WP4O4Z1768AKZC2RYA9G/gen-launcher.png Blog - Getting Started With Covenant - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1622411865270-VXBM7C16GGCBKN6YCZRT/cov-logo.png Blog - Getting Started With Covenant - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1622426650435-AF0S2LRVXG8E8WHBRBCY/callback.png Blog - Getting Started With Covenant - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1622426868215-NR3ON8WVL2QZAAED4M00/seatbelt.png Blog - Getting Started With Covenant - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1622425644121-T6E9L9BW7AMXFPL66H4T/launchers.png Blog - Getting Started With Covenant - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1622426743053-HU1AGVRBX140GPEMCD48/help-portscan.png Blog - Getting Started With Covenant - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1622426805002-KYTSADBYC9BEYZHWBJYW/keylogger.png Blog - Getting Started With Covenant - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1622426572565-3AYTLV4212OV22J6XIDX/launcher-target-host.png Blog - Getting Started With Covenant - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1622426716922-IBTIQ9EKTW6INRR181HW/grunts.png Blog - Getting Started With Covenant - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1622426841446-U3NC1N6DO6NBSFXYL5OV/screenshot.png Blog - Getting Started With Covenant - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1622426120498-OMFWLQPRPMSY2BBT0GCE/create-launcher-host.png Blog - Getting Started With Covenant - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1622426781029-F7PA4D8E0DAGZPJ5C9YC/portscan.png Blog - Getting Started With Covenant - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://sleepy-student.co/blog/hta-attacks monthly 0.5 2021-07-08 https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1622599710968-RYH5ZPJ2ZM1EQX90L6DU/spawn-calc.png Blog - HTA Attacks - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1622599625096-H862P8KCLW4H3IBFI99Q/hta-html.png Blog - HTA Attacks - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1622599682092-4FB9OHU08QLIA0HO321T/download-file.png Blog - HTA Attacks - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1622599644037-Y997KND1PXH60V4PUJ86/download-hta.png Blog - HTA Attacks - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://sleepy-student.co/blog/gaining-initial-access monthly 0.5 2021-07-08 https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1622816540004-X9ZAKOGH56OKMBCMACXB/exec-calc.png Blog - Creating Malicious Macros - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1622816481888-EGCIQ5LHQY8B95RWJNIE/save-macro.png Blog - Creating Malicious Macros - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1622816693941-G46UPIRSTHJE2A9XEC7K/create-mac.png Blog - Creating Malicious Macros - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1622816238633-9WL1HFS7EBVYQGMJ11LC/check-issues.png Blog - Creating Malicious Macros - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1622816453428-67OLMBZIYDG4P229LKZV/note-removed-info.png Blog - Creating Malicious Macros - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1622816224300-6FZ4TKV3ZMFWAIJL1WZA/get-to-inspect.png Blog - Creating Malicious Macros - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1622816130546-7M7QWPJN7DRD3FWHSTPS/macro.png Blog - Creating Malicious Macros - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1622816368082-EJLLMSU2HPY4Z0CRO176/inspect-all.png Blog - Creating Malicious Macros - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1622816414550-MM4O7PU6YTR6K5MXPMQ7/remove-all.png Blog - Creating Malicious Macros - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://sleepy-student.co/blog/getting-started-with-mythic monthly 0.5 2021-07-08 https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1621701419219-RXRVYB0DWXT6YYOLVGZ0/mythic-infoc2-prof.png Blog - How To Get Started With Mythic C2 Framework - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1622499794780-8XAEUHRD5LQDRPWGJC8I/mythic-cmdAttk.png Blog - How To Get Started With Mythic C2 Framework - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1621739082849-VPI1HE8IRMGOZLZRPGZF/active-callbacks.png Blog - How To Get Started With Mythic C2 Framework - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1621701576451-BDHRVXKUISRPJRA7IG2W/view-payloadconfig.png Blog - How To Get Started With Mythic C2 Framework - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1621701140707-DDI4DAWTMNZ6BY8KC76R/mythic-changeusercreds.png Blog - How To Get Started With Mythic C2 Framework - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1621700967272-1872FY2A7E77S312C28W/startscript-mythic.png Blog - How To Get Started With Mythic C2 Framework - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1621701392635-D1RO2TPD46U8N6KBFSG9/mythic-payloadOS.png Blog - How To Get Started With Mythic C2 Framework - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1622501854378-US0MVBU2QRPT4ZUA015K/live-task.png Blog - How To Get Started With Mythic C2 Framework - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1621700510107-W269HF0N6XLO5DDS45I3/mythic-opmanage.png Blog - How To Get Started With Mythic C2 Framework - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1621700861516-WV4959WU971SRKH670TM/clone-mythic.png Blog - How To Get Started With Mythic C2 Framework - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1621701014157-JPEAF0WUY2PI071BBE5R/statcheck-mythic.png Blog - How To Get Started With Mythic C2 Framework - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1621701104954-7UAUQ8TF29IPPMIH3EA2/accept-contmythic.png Blog - How To Get Started With Mythic C2 Framework - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1621701352901-0IKEZI615Q6JX14NNPIT/create-payload.png Blog - How To Get Started With Mythic C2 Framework - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1622223217556-IQHVXPLXINHZTTGN9SCF/infect-target1.png Blog - How To Get Started With Mythic C2 Framework - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1621739456789-KRLX15EVSAN6CMWT2CXF/screenshot.png Blog - How To Get Started With Mythic C2 Framework - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1621739419428-KGD4JNGDJTGIOFGIJKGL/commands.png Blog - How To Get Started With Mythic C2 Framework - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1621739440413-VQK2PZ3FBR4VVW7T8AH5/file-ex.png Blog - How To Get Started With Mythic C2 Framework - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1621700741731-HDPGKXOCOKYQQUY5IBZA/mythic-globalC2profiles.png Blog - How To Get Started With Mythic C2 Framework - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1621701226571-8LKVR4R3Z0HN05LOQCPG/mythic-globalpayloads.png Blog - How To Get Started With Mythic C2 Framework - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1621700704715-KSUUX55VENK14312TM9K/payload-documentation.png Blog - How To Get Started With Mythic C2 Framework - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1621701467419-FY8PEE34GL9SAVF25FED/mythic-payloadbuilt.png Blog - How To Get Started With Mythic C2 Framework - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1621701877318-DKAWBRI5F94JQ5GP282U/live-eventfeed.png Blog - How To Get Started With Mythic C2 Framework - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1621700881601-NVVX9DRRAF1XT8ZW1S9V/mythic-jsonconfig.png Blog - How To Get Started With Mythic C2 Framework - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://sleepy-student.co/blog/tmux monthly 0.5 2021-06-20 https://sleepy-student.co/blog/o365-phishing-simulation monthly 0.5 2022-02-22 https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1619839017119-RR357PSQ0Y5ZEUP70NZW/attackSimHome.png Blog - How To Get Started With o365 Phishing Simulation Training For Free https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1619841286691-BSLAS4GJGGA664CQWXT0/results.png Blog - How To Get Started With o365 Phishing Simulation Training For Free https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1619839389422-9F2HI58GMXR8CWO25ZGP/name-sim.png Blog - How To Get Started With o365 Phishing Simulation Training For Free https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1619838813644-2KBAWTPHQIUNGU17MXSH/training-prefs.png Blog - How To Get Started With o365 Phishing Simulation Training For Free https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1619840823683-RQNRDW33QWORFJFPVA7C/selected-pref.png Blog - How To Get Started With o365 Phishing Simulation Training For Free https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1619841602828-W7UXMW7RP64EICA0NTR0/bugs-inbox.png Blog - How To Get Started With o365 Phishing Simulation Training For Free https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1619841201677-0DTWYFOEDZ56D86M40LH/sendtest.png Blog - How To Get Started With o365 Phishing Simulation Training For Free https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1619987494482-JGYS17M4OBS4FDC90XZI/demobizinfo.png Blog - How To Get Started With o365 Phishing Simulation Training For Free https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1619841473690-6R1XY1XZ4552UQPFZNAM/landingpage-message.png Blog - How To Get Started With o365 Phishing Simulation Training For Free https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1619841339653-9I02QADWPKT8ZBB6DJJ7/training-assigned.png Blog - How To Get Started With o365 Phishing Simulation Training For Free https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1619841383364-VCI47BA4VL16LJ1XWEA6/cal-invite.png Blog - How To Get Started With o365 Phishing Simulation Training For Free https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1619987514946-RWCUAK3O72TKJE01T501/verifycel.png Blog - How To Get Started With o365 Phishing Simulation Training For Free https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1619838627330-IOA61MCQ7JI8CHZ1BRR8/select-payload.png Blog - How To Get Started With o365 Phishing Simulation Training For Free https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1619838475440-6MW15M8CUKNOTB4FHOFU/empty-simulations.png Blog - How To Get Started With o365 Phishing Simulation Training For Free https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1619987480737-I9X89OLJ0F9R9N9GMHAZ/e5-signup.png Blog - How To Get Started With o365 Phishing Simulation Training For Free https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1619839722983-FD5FPIKVMZ8O4MQCF7FC/select-training-pref.png Blog - How To Get Started With o365 Phishing Simulation Training For Free https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1619841518178-FTMOF5PYDNURIQTTPPL2/bugs-login.png Blog - How To Get Started With o365 Phishing Simulation Training For Free https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1619838533900-AFAERPM6PKGSWPD8OU76/select-tech.png Blog - How To Get Started With o365 Phishing Simulation Training For Free https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1619841131232-G34MRVEIC4HFHOYPH8WM/launch-sim.png Blog - How To Get Started With o365 Phishing Simulation Training For Free https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1619840463057-462AKMUFQ17XAILM4O07/targetbygroup.png Blog - How To Get Started With o365 Phishing Simulation Training For Free https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1619838979495-CZQW45T462518ZJESUY8/admin-dashboard.png Blog - How To Get Started With o365 Phishing Simulation Training For Free https://sleepy-student.co/blog/tools-and-port-forwarding monthly 0.5 2022-02-21 https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1619304524225-9EL2SAM56LJOGNI89WVP/Screenshot+2021-04-24+154646.png Blog - Practical Dynamic Port Forwarding https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1619303340207-EXVMFIIXZLNQQD1WHRCX/Pasted+image+20210424152718.png Blog - Practical Dynamic Port Forwarding https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1617684252077-M64FN1VLTIMVKRHIP960/Pasted+image+20210405205438.png Blog - Practical Dynamic Port Forwarding https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1619303109290-WGPY93P8E2Q7X5FYT4EO/Pasted+image+20210420173953.png Blog - Practical Dynamic Port Forwarding https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/b1bdfef4-4d19-401f-b0dd-698d04b22d2b/burp-socksproxy.drawio.png Blog - Practical Dynamic Port Forwarding https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1619303660452-IEO0ZH0DKYCJ8VB0ZX8C/Screenshot+2021-04-24+153214.png Blog - Practical Dynamic Port Forwarding https://sleepy-student.co/blog/tryhackme-lfi-walkthrough monthly 0.5 2022-02-21 https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1619102563881-3R1MYZ852HPTI4UETHHN/page-param.png Blog - TryHackMe LFI WalkThrough https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1619102949293-WKIGA8NCRUI6XMD4C1YQ/source-py.png Blog - TryHackMe LFI WalkThrough https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1619102594260-Y3ROUR44L984QZHT63HW/etc-sudoers.png Blog - TryHackMe LFI WalkThrough https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1619103357700-0KR5104UB4DX6K4DSXUF/sudolist.png Blog - TryHackMe LFI WalkThrough https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1619102769843-H2HR4LX0QAMRQCM2LY7N/view-src.png Blog - TryHackMe LFI WalkThrough https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1619102887345-ERYPA6GTU5ZQ5JJPBTJ5/using-key.png Blog - TryHackMe LFI WalkThrough https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1619210622942-61XLP5YVUI5J77W6OOLM/root.png Blog - TryHackMe LFI WalkThrough https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1619103035353-A142ZA6O1MKXAGQU2RCN/etc-sudoers.png Blog - TryHackMe LFI WalkThrough https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1619103541192-15N56Y87OIZ43OB9NNKA/proc-cmdline.png Blog - TryHackMe LFI WalkThrough https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1619102989904-OEXRC5KSQXX1ZY4NWASF/viewingsource.png Blog - TryHackMe LFI WalkThrough https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1619189216686-CA7DEWHV3B75EM11MYW2/etc-pass.png Blog - TryHackMe LFI WalkThrough https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1619102837798-GLYBA0RXX2CURF60YB26/priv-key.png Blog - TryHackMe LFI WalkThrough https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1619189184278-7I2RR9PQICOCEKY46AWL/view-files.png Blog - TryHackMe LFI WalkThrough https://sleepy-student.co/blog/practical-local-port-forward monthly 0.5 2022-02-21 https://sleepy-student.co/blog/lame monthly 0.5 2021-11-16 https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1615350670958-4B4LBZS8GD6NUCYGCQEV/user-flag-looking.png Blog - Lame https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1615350278945-KHK9C6N1IO0RX3MIK3CE/smb-enum.png Blog - Lame https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1615350530552-FJNUQNNO9X15J90GJ4JG/pty.png Blog - Lame https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1615349993176-BWAN9LV31N7AOI1G1PNF/nmap-lame.png Blog - Lame https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1615350194572-W50VPFZR2LUE3DU1QD45/samba-lame-L.png Blog - Lame https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1615350433604-Y528KJHBV6JKT7ZO0697/root-flag.png Blog - Lame https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1615350387409-HAPDUM48EKMN8YO5VKEH/rev-shell.png Blog - Lame https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1615350809641-0OR41DN5I8HO07QI9ZF3/infocard.png Blog - Lame https://sleepy-student.co/blog/ssh-tunnels monthly 0.5 2021-07-08 https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1617684252077-M64FN1VLTIMVKRHIP960/Pasted+image+20210405205438.png Blog - Pivoting with SSH Cheat Sheet https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1617682152294-GKZEA1NTETODWP9UJ197/tunnel.png Blog - Pivoting with SSH Cheat Sheet https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1617721915215-7FR2WTCGT17D1KQG5J7M/new2-config.png Blog - Pivoting with SSH Cheat Sheet https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1617721976721-7IQK0C1DUGA580Y5Y8TZ/new-config.png Blog - Pivoting with SSH Cheat Sheet https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1617685591121-29AHRBAECMVMCMUDJ8WM/resized.png Blog - Pivoting with SSH Cheat Sheet https://sleepy-student.co/blog/linux-cheat-sheet monthly 0.5 2021-07-08 https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1617421260309-VF1JFL5MXDQQPB199N2Y/lin-cheat.png Blog - Linux Cheat Sheet https://sleepy-student.co/blog/growing-pains monthly 0.5 2021-07-08 https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1616297211182-NQF18FQFG178NI04MYWN/Pasted+image+20210320194244.png Blog - Growing Pains https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1616295373118-T74CUDT2MWJ5IPK5KJ6I/Pasted+image+20210320195501.png Blog - Growing Pains - Anywho let's back up a bit. https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1615348197609-QLGS8JB6GZ15W1SNFN34/AD-cycle.png Blog - Growing Pains https://sleepy-student.co/blog/uploading-files-to-windows-machines monthly 0.5 2022-02-21 https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1615950882476-UE39UY5M0OZ31YMWC4A2/three.png Blog - Uploading Files to Windows Machines https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1615950938947-NDVZ59ERSNS342L97U15/four.png Blog - Uploading Files to Windows Machines https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1615951077923-BWX13MVGBZIMEAX77UWI/six.png Blog - Uploading Files to Windows Machines https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1615950670792-7RXHWNZ3TANH5WBYH3RX/two.png Blog - Uploading Files to Windows Machines https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1615950414609-95IIY6NQBY07Z0XVNYTB/image-asset.png Blog - Uploading Files to Windows Machines https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1615951023898-K2I9YB8NN241S7LPAPVC/five.png Blog - Uploading Files to Windows Machines https://sleepy-student.co/blog/harvesting-domains monthly 0.5 2022-03-04 https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1614997536913-EVWL27MSPSZ5MXFL8KDM/high-score.png Blog - Harvesting Domain Names for a Profit https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1614968686836-RT5DRJG1C7W66IAUAYTN/ina.jpg Blog - Harvesting Domain Names for a Profit https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1614996489784-CM84YZ6HZHE9O6S0IWVB/toad3.png Blog - Harvesting Domain Names for a Profit https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1614998713539-1MOZVQI0ZFQFVUH3DRAE/malware-deliv.png Blog - Harvesting Domain Names for a Profit - Malware Delivery: https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/7001124f-006e-40fc-8f1c-4da03fd4b1a9/BlogSDTakeover-Page-1.drawio+%281%29.jpg Blog - Harvesting Domain Names for a Profit - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1614998128975-W9QIOD2H5YBOIYP0ZMF3/wario.png Blog - Harvesting Domain Names for a Profit https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1614995653187-CEIKMXOYAEAOAXL6WXFO/image-asset.png Blog - Harvesting Domain Names for a Profit https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1614996188064-0BTSGON7KMZM9WK5D6Q8/downfall-shroom.png Blog - Harvesting Domain Names for a Profit https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1615165053410-S6T0SZYAWAJ77XOVJRNY/toad1.png Blog - Harvesting Domain Names for a Profit https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/cfe6fec0-f309-489f-abab-45593baefcda/BlogSDTakeover-Page-2.drawio+%281%29.jpg Blog - Harvesting Domain Names for a Profit - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1614997900521-WN1J983LPL31OS48DY1R/accnt.png Blog - Harvesting Domain Names for a Profit - User Account Takeover: Attackers can take over user accounts. One way they might accomplish this is via a typical phishing example. Send a URL to a victim that points to the login page. Capture user login credentials when they type them into the form Password managers may automatically fill the user credentials before the user can even decide not to Leverage stolen credentials to authenticate as the victim https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1614996541280-VAO67Q1JYAS1AA5QDO4D/toad4.png Blog - Harvesting Domain Names for a Profit https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1614998567671-VN3Y4R16Q3NQNGTH837M/deadpool.png Blog - Harvesting Domain Names for a Profit - Session Hijacking: https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1614996018004-7FTKYYOWI4MD58H561GR/image-asset.png Blog - Harvesting Domain Names for a Profit https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1614996610705-ZKTTOEOQXEN1N9EJDLB2/toad5.png Blog - Harvesting Domain Names for a Profit https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1614995831792-8BGDB0LP3ZVVCRHY1KCV/image-asset.png Blog - Harvesting Domain Names for a Profit https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1614995528374-S19PQ52O3587U1DCKH7K/image-asset.png Blog - Harvesting Domain Names for a Profit https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1614997218376-XKK8GRPKVS3CHC29V014/exp-design.png Blog - Harvesting Domain Names for a Profit - Experimental Design https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1614997501547-TUHABH3YKN4LN35FACUQ/defacement.png Blog - Harvesting Domain Names for a Profit https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1614999044284-JK50DLTIXGTQ5XY5K23P/takeaways.png Blog - Harvesting Domain Names for a Profit - DNS names can be harvested opportunistically This attack vector *always* gives full server-side control. DNS hygiene is important! https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1614996815013-MIM8LTFG0SIOUMQ9MIRK/Copy+of+tools.png Blog - Harvesting Domain Names for a Profit https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1614995379432-4ZA0B03QWLKSRGXP0HSO/image-asset.png Blog - Harvesting Domain Names for a Profit https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1614998349868-B6LDVBUGY3B9DM3CHTND/hygiene.png Blog - Harvesting Domain Names for a Profit - Mitigation Techniques https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1614996081829-GXNB0HDSF1GYBZF3F4NR/bowser-hacker.png Blog - Harvesting Domain Names for a Profit https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1615165078732-H8U8VBFISGI7HE0Z4HTW/toad2.png Blog - Harvesting Domain Names for a Profit https://sleepy-student.co/blog/my-first-ctf monthly 0.5 2021-11-16 https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1609869628601-2II8LZK635BZNF3V4O03/Screenshot+2021-01-05+095902.png Blog - My First CTF Write Up Notice this response is the data used on the web page to display user data "User" and "Age". I tried changing the {"getUser": 1} parameter to {"getUser": 2}, just to observe what kind of input the API expects. I was curious if I could pass another number in the parameter to receive another user or if I could possibly pass strings and create another query. I was looking for something interesting that would tell me what parameters the API allows. I received a 200 response but a not found error with each attempt. I tried changing getUser to getFlag and sent off a similar POST request with these changes. I received an error response No API Token. So I decided to try to query for the token itself. I wasn't confident I would receive the API token but I was curious to see what response I might get. I received a list of possible commands. My POST request: https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1609870043107-DBYI1GKWJZU26ZXHPOZP/Screenshot+2021-01-05+100549.png Blog - My First CTF Write Up https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1609870303735-ZHV318O8Y1DM493HUWNM/image-asset.png Blog - My First CTF Write Up Figure 2: Route Results https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1609869866029-Z8LHT7LATDGP58O6SK6M/Screenshot+2021-01-05+100411.png Blog - My First CTF Write Up From here I sent a POST request passing the API token and the getFlag argument. https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1609870765688-Z7N9K8SK64WYUE0BKC4C/we03-proof.png Blog - My First CTF Write Up Figure 6: WE03 Flag https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1609869732784-9O732E49NPN9ROXAHE19/Screenshot+2021-01-05+100207.png Blog - My First CTF Write Up Server Response with command options: https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1609869781965-KWW891YIKVZ8YIUN100C/Screenshot+2021-01-05+100243.png Blog - My First CTF Write Up So from here, I decided to try the config command. https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1609869561920-EG5Z6SOIK0IZ7EOM4MXX/Screenshot+2021-01-05+095747.png Blog - My First CTF Write Up https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1609870022793-BMG4T3XCOZW5WU7KC6PV/Screenshot+2021-01-05+100500.png Blog - My First CTF Write Up And finally, receive the response we have been looking for: https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1609870204451-AO2MQKIVMPYF9YPVI48Z/we01.png Blog - My First CTF Write Up Figure 1: WE01 https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1609870666804-L71IMJZ4DL6DG30FEO60/we03-robots.png Blog - My First CTF Write Up Figure 5: robots.txt https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1609870463938-WKOV568YPUMC7E9ININX/proof-we01.png Blog - My First CTF Write Up Figure 3: proof-weo01 https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1609870572407-5LGH3TYFO4DOFLSPY78T/we03.png Blog - My First CTF Write Up Figure 4: WE03 https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1609870814870-9QPM5SOF3CKIYPHQ81EE/wm03.png Blog - My First CTF Write Up Figure 7: WM03 https://sleepy-student.co/blog/from-cs-student-to-offensive-security-engineer monthly 0.5 2021-07-08 https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1610765365701-3WTNPJUJJ108GPC4H0J6/yodaDerek.png Blog - How I Landed My First Offensive Security Gig https://sleepy-student.co/blog/my-first-internship monthly 0.5 2021-07-08 https://sleepy-student.co/blog/category/notes monthly 0.5 https://sleepy-student.co/blog/category/hackthebox monthly 0.5 https://sleepy-student.co/blog/category/cheat+sheets monthly 0.5 https://sleepy-student.co/blog/category/personal monthly 0.5 https://sleepy-student.co/blog/category/cheat+sheet monthly 0.5 https://sleepy-student.co/blog/tag/college monthly 0.5 https://sleepy-student.co/blog/tag/notes monthly 0.5 https://sleepy-student.co/blog/tag/DNS monthly 0.5 https://sleepy-student.co/blog/tag/SMB monthly 0.5 https://sleepy-student.co/blog/tag/inverview monthly 0.5 https://sleepy-student.co/blog/tag/Offensive-Security monthly 0.5 https://sleepy-student.co/blog/tag/hacking monthly 0.5 https://sleepy-student.co/blog/tag/Engineer monthly 0.5 https://sleepy-student.co/blog/tag/CTF monthly 0.5 https://sleepy-student.co/blog/tag/OSCP monthly 0.5 https://sleepy-student.co/blog/tag/CRTP monthly 0.5 https://sleepy-student.co/blog/tag/Linux monthly 0.5 https://sleepy-student.co/blog/tag/HTB monthly 0.5 https://sleepy-student.co/blog/tag/challenge monthly 0.5 https://sleepy-student.co/blog/tag/AppSec monthly 0.5 https://sleepy-student.co/blog/tag/subdomain-takeover monthly 0.5 https://sleepy-student.co/blog/tag/Offsec monthly 0.5 https://sleepy-student.co/blog/tag/Active-Directory monthly 0.5 https://sleepy-student.co/blog/tag/internship monthly 0.5 https://sleepy-student.co/blog/tag/HackTheBox monthly 0.5 https://sleepy-student.co/about daily 0.75 2021-05-13 https://images.squarespace-cdn.com/content/v1/5fea67e6d766a320f4e3c947/1614923814062-V5N5REFSYFGQ3CFAIE2P/image-asset.jpeg About - Sleepy Student I am just a noob to the cybersecurity community hoping to do some good by sharing my experience with others. In this blog, I share my notes, things I have learned/am learning, and a personal story here and there. https://sleepy-student.co/resources daily 0.75 2021-11-12 https://sleepy-student.co/about-1 daily 0.75 2025-06-10 https://images.squarespace-cdn.com/content/v1/5ed6c3e12ace671127c071e4/1595527917513-05T9NOR59ZQHF5KA0N4K/image-asset.jpeg About About OtroQuest It all begins with an idea. Maybe you want to launch a business. Maybe you want to turn a hobby into something more. Or maybe you have a creative project to share with the world. Whatever it is, the way you tell your story online can make all the difference. Don’t worry about sounding professional. Sound like you. There are over 1.5 billion websites out there, but your story is what’s going to separate this one from the rest. If you read the words back and don’t hear your own voice in your head, that’s a good sign you still have more work to do. Get in touch →