niraj choubey – Medium

Published in InfoSec Write-ups

·Feb 23

Intercepting Android Emulator SSL traffic with burp using magisk

In an android security testing intercepting SSL traffic from the apk is one of the basic requirement. Their are many ways in which it can be done Using Genymotion Genymotion is the easiest one cause the emulators that comes with it is rooted. This article here has pretty good explanation…

Android Pentesting

6 min read

Intercepting Android Emulator SSL traffic with burp using magisk

Published in InfoSec Write-ups

·Nov 23, 2021

Compiling Postgres library for exploiting UDF to RCE

I recently took WEB-300 course and clear the OSWE exam. WEB-300 course module includes UDF reverse shell. One thing I find difficult is how to compile libraries for specific version of postgres to be used with UDF. So I decided to share what I have learned. Advanced Web Attacks and Exploitation (AWAE) | Offensive Security Learn white box web app security pentesting in Advanced Web Attacks and Exploitation (WEB-300). Complete the course and…www.offensive-security.com

Rce

4 min read

Compiling Postgres library for exploiting UDF to RCE

Published in InfoSec Write-ups

·Jun 8, 2021

Insecure Deserialization — Web Challenges — Part 1

This writeup will be about solving expert level challenges in insecure deserialization category on port swigger web academy. I will cover this in 3 parts, solving 3 challenges. Want to keep each part small and simple. Developing a custom gadget chain for Java deserialization Challenge https://portswigger.net/web-security/deserialization/exploiting/lab-deserialization-developing-a-custom-gadget-chain-for-java-deserialization

Insecure Deserialization

7 min read

Published in InfoSec Write-ups

·Jan 9, 2021

Exploiting second-order blind SQL injection

Recently HackerOne organized an online CTF called 12 days of hacky holiday CTF. 12 Days of Hacky Holidays CTF Dear hackers, The Grinch has gone hi-tech this year with the intentions of ruining the holidays and we need you to…www.hackerone.com There was a total of 12 flags to be captured and for each flag, HackerOne gave a private program invitation on their platform. Grinch Network Apps Edit descriptionhackyholidays.h1ctf.com

Infosec

7 min read

Exploiting second order blind SQL injection

Dec 6, 2020

My 2 cents on SANS GPEN

Disclaimer: This certification was sponsored for me. Recently I attempted SANS GPEN and passed with flying colors. Got 92% to be exact. So thought of sharing my experience for common good. This blog will contain Details about the cert SANS GPEN vs Offsec OSCP Who should take a plunge How…

Infosec

5 min read

Mar 12, 2020

Split second writeup nullcon/hackim ctf 2020

I took part in hackim ctf 2020 organised by nullcon. This writeup will be for one specific web challenge i.e split second. (Note: I could not solve this, even then i am writing this just to learn and probably help someone learn)Nullcon team did published the whole ctf source code…

Infosec

9 min read

Split second writeup nullcon/hackim ctf 2020

Apr 14, 2019

CORS for dummies

It all started with JavaScript support for browsers. JavaScript brought with it amazing new features e.g. dynamic contents, event based programming, DOM(Document Object Model) manipulation etc. Along with all these, came serious security concerns. What if an attacker.com tries to steal bank details from your-bank.com while you are logged in…

Java Script

6 min read

CORS(Cross Origin Resource Sharing) for dummies