Manash – Medium

Home

Following

Library

Reading history

Stories

Stats

Manash

Pinned

Published in
InfoSec Write-ups

Bypassing Amazon WAF to pop an alert()

Hey everyone, its been a while since I published anything. This time, I’ll be sharing how I bypassed Amazon WAF to get XSS on the target…

Aug 29, 2022

Bypassing Amazon WAF to pop an alert()

Aug 29, 2022

Published in
InfoSec Write-ups

Hacking IPMI and Zabbix in HackTheBox — Shibboleth

Port Scanning

Apr 27, 2022

Hacking IPMI and Zabbix in HackTheBox — Shibboleth

Apr 27, 2022

Get an email whenever Manash publishes.

Don't want to miss out on awesome Infosec content? Consider subscribing via email :)

By signing up, you will create a Medium account if you don’t already have one. Review our Privacy Policy for more information about our privacy practices.

Medium sent you an email at to complete your subscription.

Published in
System Weakness

From file upload to command injection to AWS compromise

File upload feature has a command injection vulnerability from which we get AWS credentials to access sensitive file in s3 bucket.

Apr 24, 2022

From file upload to command injection to AWS compromise

Apr 24, 2022

Published in
InfoSec Write-ups

HackTheBox — Devzat

Devzat is a medium difficulty box in HackTheBox

Mar 15, 2022

HackTheBox — Devzat

Mar 15, 2022

Published in
InfoSec Write-ups

Lumberjack Turtle — Writeup

Difficulty: Medium Room Description: No logs, no crime… so says the lumberjack.

Feb 1, 2022

Lumberjack Turtle — Writeup

Feb 1, 2022

Published in
InfoSec Write-ups

Exploiting Execute After Redirect (EAR) vulnerability in HTB Previse

Exploiting Execute After Redirect for fun and profit??

Jan 10, 2022

Exploiting Execute After Redirect (EAR) vulnerability in HTB Previse

Jan 10, 2022

Stack based Buffer Overflows - Prerequisites

Hello everyone, hope you all are doing great. I’m planning to write some blogs (you can call it a series of blogs) on Buffer Overflows. I…

Dec 10, 2021

Stack based Buffer Overflows - Prerequisites

Dec 10, 2021

Published in
InfoSec Write-ups

Zeno — THM Writeup (Abusing service file misconfigurations)

Hello all, today we be doing Zeno from TryHackMe. It is rated Medium and the description says “Do you have the same patience as the great…

Oct 24, 2021

Zeno — THM Writeup (Abusing service file misconfigurations)

Oct 24, 2021

Published in
InfoSec Write-ups

IDE - TryHackMe Writeup

Hi all, today we will take on the IDE room in TryHackMe. It is rated Easy and the room description says: “An easy box to polish your…

Oct 22, 2021

IDE - TryHackMe Writeup

Oct 22, 2021

Published in
InfoSec Write-ups

TryHackMe - Sweettooth Inc. (non port forward method)

Hello everyone, this one is going to be the write-up for the Sweettooth Inc. room on TryHackMe. In this room, we’ll have to first…

Aug 2, 2021

TryHackMe - Sweettooth Inc. (non port forward method)

Aug 2, 2021

Hack the Box — Spectra

Hello all, here is my walk through of Spectra

Jun 27, 2021

Hack the Box — Spectra

Jun 27, 2021

Manash

Manash

Security Consultant | CTF Player | eJPT | Red Team ♥️

Following

Help
Status
About
Careers
Press
Blog
Privacy
Rules
Terms
Text to speech