Antti Virtanen lokori

... my first disclosure. Man, it feels weird doing this.

From the vendor that brought you a
                        vulnerable cloud storage platform comes
                        
           ___              ____  __        __     __ 
          / _ \___ ___ ____/ / / / /__  ___/ /__ _/ /____ 
         / // / -_) _ `/ _  / /_/ / _ \/ _  / _ `/ __/ -_)

//_/_,/_,/_/ ./_,/_,/_/_/

How to pass the OSCP

Recon
Find vuln
Exploit
Document it

Recon

Unicornscans in cli, nmap in msfconsole to help store loot in database.

XML Vulnerabilities

XML processing modules may be not secure against maliciously constructed data. An attacker could abuse XML features to carry out denial of service attacks, access logical files, generate network connections to other machines, or circumvent firewalls.

The penetration tester running XML tests against application will have to determine which XML parser is in use, and then to what kinds of below listed attacks that parser will be vulnerable.

	@binkmail.com
	@bobmail.info
	@chammy.info
	@devnullmail.com
	@letthemeatspam.com
	@mailinater.com
	@mailinator.net
	@mailinator2.com
	@notmailinator.com
	@reallymymail.com

	#!/bin/bash

	# Original: https://gist.github.com/woowa-hsw0/caa3340e2a7b390dbde81894f73e379d

	set -eu
	umask 0022

	TMPDIR=$(mktemp -d awsenv)

	echo "TEMPDIR $TMPDIR"

	#!/bin/sh

	DOCKER=`which docker`
	IMAGE='owasp/zap2docker-weekly'
	URL='https://www.example.com'
	ZAP_API_PORT='8090'

	# Start our container
	CONTAINER_ID=`$DOCKER run -d \
	-p $ZAP_API_PORT:$ZAP_API_PORT \

	#!/bin/sh

	DOCKER=`which docker`
	IMAGE='owasp/zap2docker-weekly'
	URL='https://www.example.com'
	ZAP_API_PORT='8090'

	# Start our container
	CONTAINER_ID=`$DOCKER run -d \
	-p $ZAP_API_PORT:$ZAP_API_PORT \

	<!DOCTYPE html>
	<html>
	<head>
	<title>Copy-Paste from Website to Terminal</title>
	</head>
	<style>
	.codeblock {
	background-color: lightyellow;
	border: 1px dotted blue;
	margin-left: 50px;

	#!/bin/bash

	## Y-Tunnukseen perustuva domainejen haku (.fi)

	## Esimerkki: getdomains 1093944-1 # MTV Oy
	# Laita tämä .bashrc tai .zshrc

	# Käyttöesimerkkejä:

	# Looppaa Y-tunnuksetn kaikki domainit läpi ja tee kysely

	# start at home
	cd ~

	ln -sfv /usr/local/opt/redis/*.plist ~/Library/LaunchAgents


	ln -sfv /usr/local/opt/mysql56/*.plist ~/Library/LaunchAgents

	export PATH=./node_modules/.bin:$PATH