#cybersecurity-1

Articles tagged with #cybersecurity-1

Windows Security: Abusing Access Tokens | A Practical CTF Walkthrough
ToxSec | Exploit misconfigured access tokens to impersonate SYSTEM and own the THM box. Feb 18, 2024 0x00 Introduction This Windows box is a clean lesson in chaining web-to-system exploitation. Jenkins gave us the foothold. Nishang and Meterpreter c...
Nov 16, 20255 min read
OSCP Proving Grounds – Levram Walkthrough
ToxSec | Web Exploitation & Linux Privilege Escalation Practice 0x00 OSCP Proving Grounds - Levram Levram is lean and surgical. No filler, no rabbit holes. You go from lazy creds on a forgotten web panel, to an authenticated RCE, and finish with a s...
Nov 16, 20255 min read
Writing Effective Bug Bounty Reports
ToxSec | Tips for an effective bug bounty write-up.
Oct 6, 20258 min read2
Bug Bounty Hunting for GenAI
ToxSec | How to deal with GenAI in bug bounty programs.
Oct 6, 20259 min read4
Nvidia's AI Kill Chain
ToxSec | NVIDIA’s AI Kill Chain reframes attacks on AI apps into five stages. It's a clean mental model for turning prompt injection into reproducible
Oct 4, 20255 min read1
ToxSec Cybersecurity Awareness Month!
Happy Cybersecurity Awareness Month!
Oct 4, 20259 min read3