Hi, i'm walula

Is it a toy? Maybe Is it a tool? Possibly Is it a dolphin? Definitely Is it awesome? Absolutely The Flipper Zero is an incredible little tool. It's both a cute little Tamagotchi and an incredible security research tool.   In its (apparent) simplicity, it's packed to the brim with sensors

Since I recently completed the OSCP exam and started this blog, I'd like to share some suggestions and insights about this journey. I'll try to keep it as short and informative as possible by touching on the following subjects: * Whoami * PWK & OSCP - PWK Course - PWK Lab - OSCP

As usual we start with Nmap: Lots of ports, appears to be a DC. After some more additional tests i realize that probably penetrating the box via network attacks is not gonna work: I decided to go back to Web analysisi, and realized a thing that was probably responsible for

Start with nmap: Only 2 ports, i connect to the website and add the hostname to the /etc/hosts file: The webapp is just a web-wrapper for a curl command: The user agent is siteisup.htb, so probably it's a custom script: It seems that it has some filters that

Is it a toy? Maybe Is it a tool? Possibly Is it a dolphin? Definitely Is it awesome? Absolutely The Flipper Zero is an incredible little tool. It's both a cute little Tamagotchi and an incredible security research tool.   In its (apparent) simplicity, it's packed to the brim with sensors

I start with nmap as usual: sudo nmap -Pn -n -T5 -vv -sT -sC -p- shared.htb Only 3 ports open, all web services. As usual i add the IP/domain to the '/etc/hosts' file. Now i'm able to connect to the website which is a simple Prestashop

Since I recently completed the OSCP exam and started this blog, I'd like to share some suggestions and insights about this journey. I'll try to keep it as short and informative as possible by touching on the following subjects: * Whoami * PWK & OSCP - PWK Course - PWK Lab - OSCP

Here's a quick list of boxes in the Offensive Security Proving Ground platform thaat i used to prepare for the OSCP exam. These are from the "Practice" section so a premium subscription is required, in alternative you could try to find these boxes on websites like VulnHub (https://www.vulnhub.