Void4m0n's Blog

A critical analysis of Chat Control 1.0 and the risks it poses to the privacy of our communications.

A review of the OSCP+ certification after passing with a score of 100/100, covering both my exam experience and preparation process.

In this post, we exploit HTB's Gavel, an interesting machine covering scenarios and vulnerabilities that we could encounter in a real environment.

A review of the CRTP certification, sharing my experience both during the exam and throughout the preparation stage.

A review of the eWPT certification, sharing my experience both during the exam and throughout the preparation stage.

A review of the eCPPT certification, sharing my experience both during the exam and throughout the preparation stage.

I earned my eJPT certification on 12 November, and I would like to share my experience in case it helps the community.

A Nibbles write-up covering fuzzing, default credentials, the Arbitrary File Upload vulnerability CVE-2015-6967 and privilege escalation by modifying a script executed through sudo.

A Cap write-up covering fuzzing, Python scripting, .pcap analysis, FTP and SSH access, and privilege escalation by abusing Linux capabilities.

A Devel write-up covering FTP access with anonymous:anonymous, creating an ASPX reverse shell with Msfvenom and escalating privileges through CVE-2011-1249, also known as MS11-046.