codemonkeyism

homelab Featured

Valid SSL Certificates for your Homelab with added ad-blocking goodness

A guide to getting valid SSL certificates for your homelab using Let's Encrypt's DNS-01 challenge and NGINX proxy manager.

hackthebox

Hack the Box Writeup - OpenAdmin

Writeup for retired Hack the Box machine, OpenAdmin.

wildfly

Securing EJBs with SSL on Wildfly 18

Wildfly has a new security framework called Elytron, which brings significant changes to how you configure Wildfly to make use of SSL for EJB connections. This post details the configuration required and shows a simple client and EJB project to demonstrate the steps needed to secure your EJB calls.

hackthebox

Hack the Box Writeup - Chaos

Guide to retired Hack the Box machine, Chaos. Lot's of steps involving some password bruteforcing using Burp Intruder and an interesting exploitation of LaTeX.

hackthebox

Hack the Box Writeup - Lightweight

I finally found a few spare moments to brush off some of the cobwebs and have a go at the retired Hack the Box machine, Lightweight. It contains some interesting techniques involving LDAP, tcpdump and linux file capabilities.

hackthebox

Hack the Box Writeup - Jerry

Probably the easiest machine on Hack the Box ever; which also means this will be the shortest writeup ever too.

hackthebox

Hack the Box Writeup - DevOops

I'm a bit late to the party on this one, but as the box has some interesting techniques involving XXE and a python pickle RCE vulnerability, I figured I would write it up just for my own notes.

hackthebox

Hack the Box Writeup - Sunday

Next up in my series of guides to retired Hack the Box machines, is my writeup of Sunday. This is listed as a 20 point box so it should be quite simple, however there were a couple of trolling moments in the course of exploiting it.

hackthebox

Hack the Box Writeup - Olympus

This post details the epic journey undertaken to meet with the ancient greek gods, represented here by the retired Hack the Box machine, Olympus.

hackthebox

Hack the Box Writeup - Poison

Today's writeup details the steps taken to own retired Hack the Box machine, Poison. There's some interesting techniques in this one, so hopefully it will make for an interesting read.

hackthebox

Hack the Box Writeup - Stratosphere

This is my writeup of retired Hack the Box machine, Stratosphere. An interesting box, with more than a few rabbit holes that need avoiding.

hackthebox

Hack the Box Writeup - Aragog

A full guide to the Hack the Box machine, Aragog.

hackthebox

Hack the Box Writeup - Nibbles

Today's writeup is for retired Hack the Box machine, Nibbles. A fairly simple machine so this won't be a long post.

hackthebox

Hack the Box Writeup - Chatterbox

In this writeup we look at the retired Hack the Box machine, Chatterbox. This is a pretty unstable box with many filtered ports, so the nmap scan needs a little tweak otherwise it will take hours to complete and the shell choice needs to be carefully made.

hackthebox

Hack the Box Writeup - Crimestoppers

A fun box, with a few twists and turns, will hopefully make for an interesting writeup. This is my guide to retired Hack the Box machine, Crimestoppers.

hackthebox

Hack the Box Writeup - Lame

As my last guide was unexpectedly popular, I figured I should get on and write another one; this time for Hack the Box retired machine, Lame.

hackthebox

Hack the Box Writeup - Beep

My writeup of how to compromise the retired Hack the Box machine, Beep.

hacking

Post Exploitation File Transfers

Once the shiny glow of getting that first reverse shell on your target has faded, you will likely need to transfer further files to the machine in order to elevate your privileges. This post details various methods to get your files where they need to go.

hackthebox

Hack the Box Writeup - Shocker

This post is a guide to the retired Hack the Box system, Shocker. Taking us through initial enumeration, all the way through to gaining a root shell.

programming

Installing Ruby using Rbenv on Ubuntu 17.10

This post details every step taken to install Ruby (and Rails) on Ubuntu 17.10

oscp

The Road to OSCP

I tried harder and achieved the OSCP certification. I have always wanted to *really* know how a pentester weaves their magic over a system, and the PWK course is the way to get that knowledge

wildfly

Setting up jTDS with Wildfly

Detailing how to use the jTDS JDBC driver as a module for Microsoft SQL Server on the Wildfly Application Server

programming

Tips, Tweaks and being Productive with Eclipse

A personal guide on how to setup and configure the Eclipse IDE to save time and be more productive

Security

Securing a new Ubuntu install

Some first steps to take to secure your new Ubuntu VM