#red-team

4 posts tagged

api-penetration-testing.md

apisecurity OWASP-api red-team walkthrough

OWASP API Security Top 10 via VAPI Walkthrough

A hands-on walkthrough of identifying and exploiting OWASP API Security Top 10 vulnerabilities using VAPI, a lab environment.

April 28, 2023 27 min read

$ cat api-penetration-testing.md

windows-service-misconfigurations.md

privesc windows red-team

Windows Service Misconfigurations: A Practical Guide to Privilege Escalation

Weak service permissions and unquoted paths are still a top privilege-escalation vector on Windows. Here's how to spot, exploit them safely

February 23, 2023 13 min read

$ cat windows-service-misconfigurations.md

abusing-sudo-rights.md

privesc linux red-team

Abusing Sudo Rights: How Misconfigured Permissions Lead to Root

Weak service permissions and unquoted paths are still a top privilege-escalation vector on Windows. Here's how to spot them, exploit them safely in testing, and fix them for good.

February 23, 2023 10 min read

$ cat abusing-sudo-rights.md

accesschk-user-guide.md

privesc windows red-team

Accesschk.exe User Guide

Weak service permissions and unquoted paths are still a top privilege-escalation vector on Windows. Here's how to spot them, exploit them safely in testing, and fix them for good.

February 15, 2023 2 min read

$ cat accesschk-user-guide.md