Overview: This article gives you an extensive view of how to gain access to the Kubernetes cluster. Inroduction One effective way to grasp the importance of Kubernetes security is by exploring a vulnerable API endpoint scenario. An API endpoint serves as a gateway for communication between different components of a…

Overview: This article gives you an extensive view of how to set up falcosecurity in a Kubernetes cluster. What is Falcosecurity? Falco is an open source runtime security solution for hosts, containers, Kubernetes, and the cloud. Get real-time visibility into unusual behaviors as well as potential security threats, intrusions, data…

Overview This article will explain how I got administrative access to a subdomain. How do I gain admin access using phpMyAdmin? Initially, I was going through domains and subdomains, where everything looked good, and I did a nuclei scan on target. subfinder -d example.com | nuclei During the scan, I…

Overview This article will walk you through the steps for a subdomain takeover for Shopify websites. How do I start? Check for all subdomains; find any subdomain that is running under Shopify and showing a page like below. If you find a website like this, you've hit the jackpot. Now…

Overview This article will walk you through the steps of changing the admin/user's password in MySQL using the CLI. Process Initially login to server and enter the command mysql -u root -p use (name-of-database)(ex:wordpress) show tables; SELECT ID, user_login, user_pass FROM (name-of-table-you-found); Now go to https://www.md5hashgenerator.com/ type in the password…

Overview This article will walk you through the steps of using Koadic to access a Windows machine with a single click. Koadic Koadic is a tool available on GitHub used in Windows post-exploitation rootkits, similar to other penetration testing tools such as Meterpreter and Powershell Empire. Requirements Attacker Machine (192.168.1.13) …

Overview This article will walk you through the steps to access AWS server via a browser. Step1: Creating an AWS account / Logging into AWS Create the AWS account using https://aws.amazon.com/ Click on sign in and then create a new AWS account. Enter the details asked to complete the signup…