Jay Pomal·Sep 12Anatomy of a Fake Government App: Dissecting an Android Dropper Disguised as “mParivahan”A file lands in your inbox or, more realistically, arrives as a WhatsApp forward, an SMS about an “unpaid traffic challan,” or a link…
Jay Pomal·Sep 8From DLL Sideloading to Domain-Wide Access: Anatomy of a TerminalFix-Style IntrusionRecently, I had the opportunity to investigate an active intrusion that began with what appeared to be a routine persistence event.
Jay Pomal·Jul 28ClickFix to WebDAV: Detailed Analysis of a Rundll32-Based Multi-Stage Malware Delivery ChainHey Cyber Warriors 👋,
Jay Pomal·Mar 5, 2021Blind OS command injection with Time DelaysHey guys here i am back again with another lab on OS command injection from portswigger. In my previous blog i have demonstrated lab of OS…
Jay Pomal·Feb 28, 2021Os Command Injection (Portswigger) : LAB -1 : OS command injection, simple caseHey folks, how’s going? i hope everybody is okay and doing well. So today we are going to do some labs of OS Command Injection from…
Jay Pomal·Dec 23, 2020Server Side Template Injection : Lab 1(Basic SSTI)Hey folks today we are going to learn about basic server side template injection.A response icon1A response icon1
Jay Pomal·Dec 17, 2020Hack The Box : OpenKeyS WriteupHey guys, today we are going to solve a machine called “OpenKeyS” from the hack the box site. If you don’t know what hack the box is i…
Jay Pomal·Oct 3, 2020TryHackMe: Year of the Rabbit WalkThroughHello all, today we are going to get through a easy room named “Year of the Rabbit” on TryHackMe. If you don’t know what tryhackme is here…A response icon1A response icon1
Jay Pomal·Sep 27, 2020TryHackMe : Pickle Rick Walk ThroughHello everyone, today i am going to take you on walk through of room named “Pickle Rick” on tryhackme. So, without any delay let’s jump on…
