If you’ve exploited VulnServer via the GTER parameter then most likely you used an egghunter to get the job done and had to utilize one of the other commands VulnServer offers to stick your shellcode in. This is due to GTER providing a very small buffer space to work with.... [Read More]

I liked Aragog simple because it had me do a few new things for initial access and root. Overall not super difficult but still fun. [Read More]

This writeup is from a few months ago. I’ve currently been super busy with OSCE and whatnot. Overall this wasn’t too bad of a box and I learned a new WinRM trick in the process. [Read More]

Enumeration [Read More]

Enumeration [Read More]