Touhid's Blog

Comments

Keep your online assets safe with a solid understanding of DNS Records! As the b... - Bug Bounty Tips on Subdomain Takeover Explained with PracticalFebruary 13, 2023
[…] #DNSTechnologies is essential for #CyberSecurity professionals. For more on Subdomain Takeover touhidshaikh.com/blog/2019/01/s… #infosec #dnssecurity #bugbountytips Source by […]
Deidre on Pluck Walkthrough (VulnHub)May 14, 2021
Great post.
Conrad on Pluck Walkthrough (VulnHub)April 14, 2021
I think the admin of this site is genuinely working hard in support of his web page, as here every…
0mniartist on Pluck Walkthrough (VulnHub)April 9, 2021
That is a very good tip particularly to those fresh to the blogosphere. Brief but very precise info… Thank you…
0mniartist on Pluck Walkthrough (VulnHub)April 9, 2021
My family members always say that I am killing my time here at net, however I know I am getting…

NFS weak permissions(Linux Privilege Escalation)

Published by touhid on April 11, 2018

If you have a Low privilege Shell on any machine and you found that a machine has an NFS share you might be able to use that to escalate privileges. Depending on how it is configured. Let’s take a tour to understand Weak permission on NFS server. Index What is NFS?…

2 Comments

Abusing SUDO (Linux Privilege Escalation)

Published by touhid on April 11, 2018

If you have a limited shell that has access to some programs using the commandsudo you might be able to escalate your privileges. here I show some of the binary which helps you to escalate privilege using the sudo command. But before Privilege Escalation let’s understand some sudoer file syntax…

41 Comments

Introduction & Networking (Pentestit Lab v11)

Published by touhid on February 23, 2018

Hello Guys, This is my FIrst post on PentestIT Lab v11. In this post, I am going to explain Network Diagram, How to Connect on Lab’s VPN. ABOUT “TEST LAB” Penetration testing laboratories “Test lab” emulate an IT infrastructure of real companies and are created for a legal pen testing…

3 Comments

Dina 1.0.1 Walkthrough (VulnHub) by gr0mb1e

Published by touhid on December 20, 2017

Dina 1.0.1 Walkthrough Original Author : gr0mb1e (https://gr0mb1e.wordpress.com/author/gr0mb1e/ ) A couple weeks back, dear ol’ VulnHub delivered unto us a buh-hut load of VMs after a bit of a dry spell. As someone who’s still cutting their teeth with pen testing, I was pretty anxious to fire up a bulk of those and get…

3 Comments

Unquoted Service Path Privilege Escalation

Published by touhid on June 22, 2017

What is Privilege Escalation? Privilege escalation is the act of exploiting a bug, design flaw or configuration oversight in an operating system or software application to gain elevated access to resources that are normally protected from an application or user. The result is that an application with more privileges than…

Touhid's Blog Posts

NFS weak permissions(Linux Privilege Escalation)

Abusing SUDO (Linux Privilege Escalation)

Introduction & Networking (Pentestit Lab v11)

Dina 1.0.1 Walkthrough (VulnHub) by gr0mb1e

Unquoted Service Path Privilege Escalation