Security Blog — Security Research
Cybersecurity research, vulnerability analysis, and practical security insights.
Offensive Security Certified Professional (OSCP / PWK) — My Experience
Hello guys. Its been a long time coming since I last posted on here and I apologize for the delay. Personal life and my job takes priority over work though, so I hope you can forgive me for this...
Kingslayer - A supply chain attack -- Part 2
_ _ _ _ _____ | |__ | || | ___| | ___ __ ___ |___ / | '_ \| || |_ / __| |/ / '_ ` _ \ |_ \ | | | |__ _| (__| <-- BACK TO hackdog.me Kingslayer - A...
Kingslayer - A supply chain attack -- Part 1
_ _ _ _ _____ | |__ | || | ___| | ___ __ ___ |___ / | '_ \| || |_ / __| |/ / '_ ` _ \ |_ \ | | | |__ _| (__| <-- BACK TO hackdog.me Kingslayer - A...
网络设备中限制用户命令交互的逃逸
在实际渗透场景中，有很多网络设备我们拿到了root权限后ssh登陆发现有命令执行限制，这是因为ssh接口提供了一个特殊的受限制的命令外壳程序，类似busybox的感觉，他可以允许root用户对设备进行配置处理，但是不允许进行命令交互，所以相当于我们拿到的只是一个鸡肋的root用户，为了突破这种限制，我们有特别的姿势 因为开放了ssh服务，所以我们可以使用scp，但是scp是无法创建目录的，所以我...
IPCAM Hacking Part 3 - Camera Firmware Analysis
[+]redrain//**/ 汪汪汪 Home Embedded devices hacking --IPCAM...
IPCAM Hacking Part 2 - Advanced Camera Exploitation
[+]redrain//**/ 汪汪汪 Home Embedded devices hacking --IPCAM...
IPCAM Hacking Part 1 - Network Camera Exploitation
[+]redrain//**/ 汪汪汪 Home Embedded devices hacking --IPCAM...