SecNigma

InfoSec Enthusiast. Aspiring Pentester. Blogger.

Buy me a coffee:

[SecNigma @secnigma]

Photobomb was an easy machine #HTB developed by slartibartfast. The machine had exploiting weak sanitation check, hardcoded creds inside JS file, exploiting image resize functionality to gain access and PATH injection for privilege escalation.
https://t.co/0hLYelSpGD
#secnigma

[SecNigma @secnigma]

Hack The Box: Forge https://t.co/uAoXfwG8x5

[Alex Durrant @ADurrante]

TIL 🔔, that you can boot directly into the BIOS by using the shutdown command:

shutdown /r /fw /f /t 0

No more guessing which startup keys work! 👍

[SecNigma @secnigma]

@_JohnHammond Expensive Certifications

[@[email protected] @RichardKogelnig]

Have some amusement on a Monday morning: A friend made a lunar lander game which hooks into the Windows copy dialog "While running, the app will detect all windows copy dialogs and paint a game overlay on top of them while they are focused." https://t.co/ghUeZic34e

[Jen Gentleman 🌺 @JenMsft]

The new PowerToys utility to extract text from anywhere on your screen is so cool 😮

[Louis Nyffenegger @snyff]

By age 30, You Should Have a Drawer with a Raspberry PI you don't use and a dozen USB cables.

[Jen Gentleman 🌺 @JenMsft]

Did you know middle clicking the refresh icon will open a copy of the website you're on in another tab? 👀

[Ian Barnard @Ian_Barnard]

Why font choice matters. 😂

[nixCraft 🐧 @nixcraft]

Classic #SysAdminDay comic. Dedicated to all Linux Unix, Windows sysadmin, IT folks working around the globe. Do check out my favourite geeky @xkcd comic https://t.co/wqUqQBeZIR too.

[PentesterLab @PentesterLab]

Giveaway time!

We are going to send a t-shirt and few goodies to one person who follows
@PentesterLab
and likes this tweet !!

And we are going to give a 1-year voucher to someone who RT this tweet!

[SecNigma @secnigma]

#Catch was an Intermediate machine from Hack The Box. This was a great machine and had several services running. I believe the idea for creating this machine was to push the players to research broader and deeper. Great work by @MrR3boot
#secnigma
https://t.co/0YbKp1j6Xy

[CataleyaVi @CataleyaVi]

Fuck poaching.

[Hank Green @hankgreen]

Everything in this image that doesn't have spikes coming off of it is a galaxy.

Every. Single. Dot.

[SecNigma @secnigma]

Writeup for #routerspace is up!
This was a good machine, which had a vulnerable API endpoint inside an APK file, found by performing dynamic analysis with Bluestacks and Burp. Then, I used the CVE-2021-3156 sudo exploit to root it. Good work #h4rithd
#HTB
https://t.co/AnmVniSPW9

[aarya @gd3kr]

built a quick app that uses gpt-3 to convert from English to RegEx so you don't have to waste time on stackoverflow: https://t.co/SQaHqsTeDB

[SecNigma @secnigma]

Good work @TheCyberGeek19 👏!
Forgot to mention you in the tweet.

[SecNigma @secnigma]

#Undetected from #HTB is retired!
This was a great machine, which showcased lot of reversing by following the footprint of the attacker from an already compromised server.
https://t.co/gplPZySfsH

[0xdf @0xdf_]

For anyone who solved the Paper machine from @hackthebox_eu, this is a fun read.