Blog

Offensive security research, exploit write-ups, and technical deep dives.

›

api-penetration-testing.md

apisecurityOWASP-apired-teamwalkthrough

OWASP API Security Top 10 via VAPI Walkthrough

A hands-on walkthrough of identifying and exploiting OWASP API Security Top 10 vulnerabilities using VAPI, a lab environment.

April 28, 2023 27 min read

$ cat api-penetration-testing.md

windows-service-misconfigurations.md

privescwindowsred-team

Windows Service Misconfigurations: A Practical Guide to Privilege Escalation

Weak service permissions and unquoted paths are still a top privilege-escalation vector on Windows. Here's how to spot, exploit them safely

February 23, 2023 13 min read

$ cat windows-service-misconfigurations.md

abusing-sudo-rights.md

privesclinuxred-team

Abusing Sudo Rights: How Misconfigured Permissions Lead to Root

Weak service permissions and unquoted paths are still a top privilege-escalation vector on Windows. Here's how to spot them, exploit them safely in testing, and fix them for good.

February 23, 2023 10 min read

$ cat abusing-sudo-rights.md

accesschk-user-guide.md

privescwindowsred-team

Accesschk.exe User Guide

Weak service permissions and unquoted paths are still a top privilege-escalation vector on Windows. Here's how to spot them, exploit them safely in testing, and fix them for good.

February 15, 2023 2 min read

$ cat accesschk-user-guide.md