Blog
Actively writing about technology, life-events and indie hacking. Here are some of my most recent thoughts and hacks I've published.
- 09 Aug 2021
Hack The Box - Love
In this post, I'll walk you through Love, an easy-level Windows machine on Hack the Box.- hack-the-box
- writeup
- love
- windows
- 13 May 2021
Hack The Box - Laboratory
In this post, I'll walk you through Laboratory, an easy-level Linux machine on Hack the Box. It has a GitLab CVE vulnerability for the user and uses path file checking on a setuid binary for the root flag.- hack-the-box
- writeup
- laboratory
- gitlab
- python
- ruby
- cve-2020-10977
- 28 Mar 2021
Hack The Box - Luanne
In this post I walk you through how I solved Luanne from Hack the Box. This is an easy difficulty NetBSD box, focussing on fuzzing and code injection via Lua.- hack-the-box
- luanne
- netbsd
- web
- lua
- injection
- fuzzing
- 12 Mar 2021
Monitor any command typed at a shell with eBPF
Ever wondered if it would be possible to monitor what is getting typed at other shells running on a Linux system. Well I have and in this post, I walk you through creating an eBPF program to monitor every command typed on a bash or zsh prompt.- linux
- bpftrace
- ebpf
- internals
- 27 Jan 2021
Correctly encode PowerShell payloads for exploits
This post is just a reminder to myself. I've been doing more and more CTF's lately and I keep having to look up how to correctly encode a base64 encoded PowerShell compatible string on Linux.- linux
- powershell
- ctf
- shell
- 10 Jan 2021
Hack The Box - Omni
In this post, I take on Omni from Hack The Box. It's labelled as an easy Windows challenge and puts a big emphasis and doing thorough reconnaissance. I very much enjoyed this box and proved to be quite a challenge.- hack-the-box
- omni
- windows
- iot
- web
- powershell
- python
- 10 Dec 2020
Deploying to Azure with Pulumi from Github Actions
Let's say we're building a new service and are tasked with spinning up the infrastructure required for it to run. It's already defined in code but how do I automate the deployment?- azure
- github
- github-actions
- pulumi
- 25 Nov 2020
A couple of tricks to easily resolve your public IP
There may come a time when you need to know the public IP address of your router, as assigned by your ISP. In this post, I show a couple of neat tricks to quickly grab your public IP.- ip
- public
- dns
- csharp
- dotnet
- 24 Oct 2020
Kong not supported on my old refurbished CPU
In this post I go through a problem I faced getting Kong API gateway up and running on an older CPU. I show how to debug the issue and how to determine if your CPU is supported- kong
- api
- proxy
- cpu