-
Session Hijacking & JWT TamperingThis lab demonstrates a complete session hijacking attack chain against an ASP.NET web application, followed by the proper mitigations. The attack…
5 min English -
SQL Injection: sqlmap & Parameterized QueriesThis lab simulates a full SQL injection attack chain against a real ASP.NET web application running on IIS with a Microsoft SQL Server backend — then…
5 min English -
Python Ransomware: AES C2 + Fernet + RustThis lab simulates a RAT-based ransomware attack in a controlled Host-Only VM environment. The attack chain covers: building an encrypted C2 channel,…
6 min English -
Python RAT: AES-EAX C2 & KeyloggerThis lab covers building a fully functional Remote Access Trojan (RAT) from scratch in Python, deploying it in a controlled Host-Only virtual environment,…
6 min English -
Reverse Shell via Scheduled TaskFourth published post in this lab series. Same private environment — Kali Linux (192.168.1.39) against Windows Server 2022 on VMware Workstation. This lab…
4 min English - Brute-Force SMB/RDP/WinRM & Persistence
Third post in this lab series. Same private environment — Kali Linux against Windows Server 2022 on VMware Workstation (192.168.1.55). This lab covers a…
4 min English -
EternalBlue: SMB Exploitation & KiwiSecond post in this lab series. Same private environment as Part 1 — Kali Linux and Windows Server 2022 on VMware Workstation. This time: setting up file…
4 min English -
Home AD Lab: Recon & Wing FTP RCEFirst post in a lab series where I'm building out a small attacker/target environment and working through a simplified end-to-end attack chain — starting…
5 min English
Back