Generated by All in One SEO v5.0.1.1, this is an llms.txt file, used by LLMs to index the site. # Ishsome Blogs ## Sitemaps - [XML Sitemap](https://blog.ishsome.com/sitemap.xml): Contains all public & indexable URLs for this website. ## Posts - [Install QRadar Community Edition in Proxmox](https://blog.ishsome.com/index.php/2026/01/06/install-qradar-community-edition-in-proxmox/) - In this post, I walk through the process of installing IBM QRadar Community Edition on a Proxmox server in my home lab. This setup helps me explore QRadar’s features, understand its architecture, and gain hands-on experience with one of the most widely used SIEM platforms in cybersecurity. In future blog posts, I’ll dive deeper into - [Proxmox VMs with NoMachine](https://blog.ishsome.com/index.php/2024/08/27/proxmox-vms-with-nomachine/) - In this blog, we explore the options for remote access to Proxmox VMs, focusing on a comparison between the built-in noVNC and NoMachine. We dive into the strengths and limitations of each tool, examining their performance, features, and ease of use. Whether you're looking for a simple, integrated solution with noVNC or a feature-rich, high-performance - [Palo Alto Firewall: Initial Configuration](https://blog.ishsome.com/index.php/2024/06/15/palo-alto-firewall-initial-configuration/) - Embarking on the path to becoming a Network Security Engineer or already a seasoned Network Engineer interested in mastering Palo Alto firewalls? You've come to the right place. In this blog, we delve into the essential steps of configuring a Palo Alto firewall in EVE-NG, focusing on the initial setup. From creating a lab environment - [IPsec VPN Between Two Palo Alto Firewalls](https://blog.ishsome.com/index.php/2024/07/11/ipsec-vpn-between-two-palo-alto-firewalls/) - In this guide, we will configure an IPsec VPN tunnel to connect two sites using Palo Alto Firewalls. The topology is set up in EVE-NG, featuring two Palo Alto firewalls running PANOS 10.1.12, each located at a different site, referred to as Site-A and Site-B. To keep this guide straightforward, we will focus primarily on - [CVE-2023-33831](https://blog.ishsome.com/index.php/2024/05/09/cve-2023-33831/) - This vulnerability allowed remote command execution (RCE) vulnerability in the /api/runscript endpoint of FUXA 1.1.13 allows attackers to execute arbitrary commands via a crafted POST request. This is due to lack of control or sanitization on inputs that can be controlled by users, thus allowing the use of dangerous methods that can be scaled for - [TryHackMe: Umbrella](https://blog.ishsome.com/index.php/2024/01/24/tryhackme-umbrella/) - Umbrella from TryHackMe is a Linux machine with multiple misconfigurations. To get a foothold, we need to perform enumeration on the Docker Registry and obtain credentials for the MySQL database. By accessing the DB, we can get usernames and passwords for multiple users to log in to a webpage and connect to SSH. To get - [TryHackMe: Bulletproof Penguin](https://blog.ishsome.com/index.php/2024/01/24/tryhackme-bulletproof-penguin/) - Bulletproof plugin is an easy room that deals with hardening security on the common services that run on a Linux machine. This room covers services such as FTP, MySQL, Redis, SSH, etc., and how their configurations can be changed to secure them from unauthorized access. Our goal in each task is to make appropriate changes to - [HTTP Request Smuggling](https://blog.ishsome.com/index.php/2024/01/27/http-request-smuggling/) - This blog is based on the HHTP Request Smuggling room from TryHackMe. What is HTTP Request Smuggling? HTTP Request Smuggling is a vulnerability that arises when there are mismatches in different web infrastructure components. This includes proxies, load balancers, and servers that interpret the boundaries of HTTP requests. Request splitting or HTTP desync attacks are - [TryHackMe: Reset](https://blog.ishsome.com/index.php/2024/01/28/tryhackme-reset/) - Reset is a Windows machine that is part of a domain and consists of many misconfigurations. Our goal is to perform a Pentest as a Red Teamer and exploit the misconfigurations to become the Administrator on the machine. We will begin our enumeration with NMAP as usual. NMAP ┌──(ishsome㉿kali)-[~/THM/Windows-Boxes/Reset] └─$ nmap -p53,135,139,445,464,636,3268,3269,3389,5985,7680,9389,49671,49673,49703 10.10.105.191 -A -oN - [Reveal Hidden Files in Google Storage](https://blog.ishsome.com/index.php/2024/01/29/reveal-hidden-files-in-google-storage/) - This blog is based on the free lab provided by PwnedLabs. PwnedLabs provides a lot of free labs to practice in the cloud environment on platforms such as AWS, GCP, and Azure. The lab showcases how Cloud storage can be easy to misconfigure and misuse, and there is also a school of thought that it - [GitLab CVE-2023-7028](https://blog.ishsome.com/index.php/2024/02/01/gitlab-cve-2023-7028/) - This blog is based on TryHackMe's room on GitLab CVE-2023-7028. Learning Objectives Exploit a GitLab CE instance through CVE 2023-7028 How the exploit works Protection and mitigation measures What is GitLab? GitLab is a renowned and widely adopted web-based repository manager that provides a comprehensive platform for source code management, continuous integration, and collaboration in - [What Is Log Poisoning?](https://blog.ishsome.com/index.php/2024/02/03/what-is-log-poisoning/) - Logs are records generated by various software applications, operating systems, and network devices to keep track of events and activities. They are essential for monitoring, troubleshooting, and security analysis. Log poisoning typically refers to malicious activities or techniques aimed at manipulating or contaminating log files in computer systems. Log poisoning involves attempting to compromise the - [TryHackMe: Kitty](https://blog.ishsome.com/index.php/2024/02/05/tryhackme-kitty/) - Kitty from TryHackMe is a Linux machine running a web application with security vulnerabilities. We are tasked with finding the vulnerabilities and exploiting them to gain root privileges on the machine. NMAP We have only two ports open 22 for SSH and HTTP port 80. ┌──(ishsome㉿kali)-[~/THM/Linux-Boxes/Kitty] └─$ nmap -p22,80 10.10.113.181 -A -oN nmap/kitty Starting Nmap - [TryHackMe: Red Team Capstone Challenge](https://blog.ishsome.com/index.php/2024/02/18/tryhackme-red-team-capstone-challenge/) - The Red Team Capstone challenge from TryHackMe is an in-depth network challenge simulating a Red Teaming engagement. The challenge includes several phases structured around the cyber kill chain that will require you to enumerate a perimeter, breach the organization, perform lateral movement, and finally perform goal execution to show impact. To best simulate how these - [Moniker Link (CVE-2024-21413)](https://blog.ishsome.com/index.php/2024/03/03/moniker-link-cve-2024-21413/) - On February 13th, 2024, Microsoft announced a Microsoft Outlook RCE & credential leak vulnerability with the assigned CVE of CVE-2024-21413 (Moniker Link). Haifei Li of Check Point Research is credited with discovering the vulnerability. The vulnerability bypasses Outlook's security mechanisms when handing a specific type of hyperlink known as a Moniker Link. An attacker can ## Categories - [Blog](https://blog.ishsome.com/index.php/category/blog/) - Your blog category - [CTF Write-ups](https://blog.ishsome.com/index.php/category/blog/ctf-write-ups/) - [TryHackMe](https://blog.ishsome.com/index.php/category/tryhackme/) - [Linux](https://blog.ishsome.com/index.php/category/linux/) - [Pwned Labs](https://blog.ishsome.com/index.php/category/pwned-labs/) - [GCP](https://blog.ishsome.com/index.php/category/gcp/) - [CVE](https://blog.ishsome.com/index.php/category/cve/) - [Local FIle Inclusion](https://blog.ishsome.com/index.php/category/local-file-inclusion/) - [Log Poisoning](https://blog.ishsome.com/index.php/category/log-poisoning/) - [SQL Injection](https://blog.ishsome.com/index.php/category/sql-injection/) - [Command Injection](https://blog.ishsome.com/index.php/category/command-injection/) - [Red Teaming](https://blog.ishsome.com/index.php/category/red-teaming/) - [Active Directory](https://blog.ishsome.com/index.php/category/active-directory/) - [Networking Blogs](https://blog.ishsome.com/index.php/category/networking-blogs/) - [Capture The Flag](https://blog.ishsome.com/index.php/category/ctf/) - [Cybersecurity](https://blog.ishsome.com/index.php/category/networking-blogs/cybersecurity-networking-blogs/)