Blog | Grey Hat Developer

My Confusion Over Local File Inclusion

by Quintius | Nov 28, 2023 | 0 Comments

If our functions
are not coded
with
security in mind,
Attackers can manipulate
parameters to find

content
of a local file
that is hosted on the server,
We’re scoping L-F-I
vulnerabilities to merger.

Will The Real Sheryl Underwood Please Stand Up?

by Quintius | Nov 14, 2023 | 0 Comments

It’s repercussions,
Here on X cause half these follows
Be bots,
That’s why most hackers,
Chose to follow those
Who prove that they not.

API: A Poetic Interpretation of Broken Access Control

by Quintius | Nov 3, 2023 | 0 Comments

Let’s get some information,
About the Cats Facts
A P I,

Some devs be thinking
they can stop this hacking
so they try.

Authentication and Authorization Attacks – Part 2

by Quintius | Oct 24, 2023 | 0 Comments

Identify the weaknesses
before they reach production,
Cause IDOR vulnerabilities
Don’t need no introduction.

If a user somehow
can access the pages that’s restricted,
This may lead to the elevation
of that user’s privilege.

Grinding Towards the PNPT: Windows Privilege Escalation Part 1

by Quintius | Mar 31, 2023 | 0 Comments

Grinding towards the PNPT: Windows Privilege Escalation- Part 131March, 2023Grinding towards the PNPT: Windows Escalation- Part 1Photo by Johny Vino Greetings, Community! In this post we are still traveling the path to reach the goal that we had set earlier last year:...

Grinding Towards the PNPT: Attacking Black Pearl

by Quintius | Jan 28, 2023 | 0 Comments

Grinding towards the PNPT: Attacking Black Pearl26January, 2023Grinding towards the PNPT: Attacking Black Pearl.Photo Creds - Barry Weatherall In this post we are still traveling the path to reach the goal that we had set earlier last year: To obtain the Practical...

Grinding Towards the PNPT: Attacking Dev

by Quintius | Dec 10, 2022 | 0 Comments

Grinding towards the PNPT: Attacking Dev9December, 2022Grinding towards the PNPT: Attacking DevPhoto Creds - Hannah Xu In this post we are still traveling the path to reach the goal that we had set earlier this year: To obtain the Practical Network Penetration Tester...

Penetration Test Report

by Quintius | Nov 4, 2022 | 0 Comments

Internal Penetration Test Report of FindingsTable of Contents Statement of Confidentiality Engagement Contacts Executive Summary Approach Scope Assessment Overview and Recommendations Network Penetration Test Assessment Summary Summary of Findings Internal Network...

Grinding towards the PNPT: Attacking Active Directory

by Quintius | Oct 25, 2022 | 0 Comments

Grinding towards the PNPT: Attacking Active Directory24October, 2022Grinding towards the PNPT: Attacking Active DirectoryPhoto Creds - Schildpaddie and matnapo, respectively. After taking a necessary fork in the road, I found myself chiseling pieces off another goal...

SQLMap and Web Attacks

by Quintius | Oct 13, 2022 | 0 Comments

SQLMap Essentials Web Attacks 13October, 2022 Days 58 - 68 SQLMap and Web Attacks 100 Days of HackingPhoto cred - Ovidiu and campaign_creators, respectively. Once again, we are still grinding along HTB’s Bug Bounty Job Role Path and although SQLMap is used while...