Proxmox VMs with NoMachine
In this blog, we explore the options for remote access to Proxmox VMs, focusing on a comparison between the built-in noVNC and NoMachine. We dive into the strengths and limitations…
IPsec VPN Between Two Palo Alto Firewalls
In this guide, we will configure an IPsec VPN tunnel to connect two sites using Palo Alto Firewalls. The topology is set up in EVE-NG, featuring two Palo Alto firewalls…
Palo Alto Firewall: Initial Configuration
Embarking on the path to becoming a Network Security Engineer or already a seasoned Network Engineer interested in mastering Palo Alto firewalls? You've come to the right place. In this…
CVE-2023-33831
This vulnerability allowed remote command execution (RCE) vulnerability in the /api/runscript endpoint of FUXA 1.1.13 allows attackers to execute arbitrary commands via a crafted POST request. This is due to…
Moniker Link (CVE-2024-21413)
On February 13th, 2024, Microsoft announced a Microsoft Outlook RCE & credential leak vulnerability with the assigned CVE of CVE-2024-21413 (Moniker Link). Haifei Li of Check Point Research is credited…
TryHackMe: Red Team Capstone Challenge
The Red Team Capstone challenge from TryHackMe is an in-depth network challenge simulating a Red Teaming engagement. The challenge includes several phases structured around the cyber kill chain that will…
TryHackMe: Kitty
Kitty from TryHackMe is a Linux machine running a web application with security vulnerabilities. We are tasked with finding the vulnerabilities and exploiting them to gain root privileges on the…
What Is Log Poisoning?
Logs are records generated by various software applications, operating systems, and network devices to keep track of events and activities. They are essential for monitoring, troubleshooting, and security analysis. Log…
GitLab CVE-2023-7028
This blog is based on TryHackMe's room on GitLab CVE-2023-7028. Learning Objectives Exploit a GitLab CE instance through CVE 2023-7028 How the exploit works Protection and mitigation measures What is…
Reveal Hidden Files in Google Storage
This blog is based on the free lab provided by PwnedLabs. PwnedLabs provides a lot of free labs to practice in the cloud environment on platforms such as AWS, GCP,…