Guertena - Blog - Banner Image
Guertena - Blog
Home Archives About
Home Archives About
Guertena - Profile Avatar
Guertena
Laugh hard. Run fast. Be kind

分類

write-ups
15
tutorials
4

標籤

  • active-directory
  • blog
  • cdn
  • command-injection
  • cookies
  • ctf
  • cve
  • database-security
  • debugging
  • default-credentials
  • deployment
  • dmsa
  • email-security
  • exploit
  • fileless
  • font-awesome
  • freepbx
  • ftp
  • github
  • github-pages
  • groovy
  • hackthebox
  • hexo
  • ike
  • jenkins
  • jupyter
  • kerberos
  • ldap
  • lfi
  • linux
  • lolbins
  • malware
  • memory-forensics
  • mssql
  • network-security
  • ntlm
  • password-cracking
  • penetration-testing
  • phishing
  • picoctf
  • postgresql
  • privilege-escalation
  • process-injection
  • python
  • rce
  • reverse-engineering
  • reverse-shell
  • security
  • smb
  • sql-injection
  • sqlite
  • ssh-tunnel
  • stacked-queries
  • static-site
  • sudo-exploit
  • vpn-security
  • web
  • web-hosting
  • web-security
  • windows
  • xss

彙整

七月 2026
4
六月 2026
2
四月 2026
1
十月 2025
1
二月 2025
2
六月 2024
1
五月 2024
8

最新文章

  • Astaroth 攻擊
  • HTB - Outbound
  • HTB - Connected
  • HTB - Checkpoint
  • HTB - Bruno

Astaroth 攻擊

2026-07-15
tutorials
3.1k 詞
  • fileless
  • lolbins
  • malware
  • penetration-testing
  • phishing
  • process-injection
  • windows
Astaroth 無檔案銀行木馬攻擊鏈

HTB - Outbound

2026-07-06
write-ups
2.5k 詞
  • hackthebox
  • penetration-testing
  • privilege-escalation
CVE-2025-49113 CVE-2025-27591 的巧妙利用

HTB - Connected

2026-07-01
write-ups
5.6k 詞
  • freepbx
  • hackthebox
  • linux
  • penetration-testing
  • privilege-escalation
  • rce
  • web
透過 FreePBX CVE-2025-57819 取得 asterisk 使用者權限,再利用 Incron 與可寫的 dahdi 設定檔完成提權至 root

HTB - Checkpoint

2026-07-01
write-ups
6.8k 詞
  • active-directory
  • dmsa
  • hackthebox
  • kerberos
  • memory-forensics
  • penetration-testing
  • privilege-escalation
  • windows
從低權限帳戶開始,透過 Tombstone 還原、VSIX Extension RCE、BadSuccessor dMSA 濫用與 VMware 記憶體取證完成域控制權

HTB - Bruno

2026-06-07
write-ups
29k 詞
  • active-directory
  • ftp
  • hackthebox
  • ldap
  • penetration-testing
  • windows
利用 FTP 匿名登入和 Active Directory LDAP 進行權限提升
1234
© 2026 Guertena
目錄