AliBawazeEerA Story of GraphQL ; Tuning Out Introspection VulnerabilitiesEver seen a one-man band at a crowded bar? Juggling instruments, stomping on pedals, singing their heart out — it’s a chaotic symphony, a…9 min read·Mar 11, 2024----
AliBawazeEerThe TROJANIZED COMPONENT: DISSECTING THE BROWSER EXTENSION AND CTI GREAT EFFECTSWithout question, 2020 was defined by the global coronavirus pandemic (GCP). So to speak Not only has the virus had huge public health…13 min read·Feb 20, 2021----
AliBawazeEerPowerShell — Data Ex-filtration over DNS (OOB)increasingly, companies considering security a top priority and ex-filtration of data are more restricted.4 min read·Aug 17, 2020----
AliBawazeEerSimple Executable HTTP Server for pentesterrecently i was in engagement and needed to download large file from the compromised machine , i was unable to get it from TFTP neither…1 min read·Oct 22, 2018----
AliBawazeEerTTY SHELL FROM ONE LINE OF PHP CODEwe all know how important to gain tty ( teletype terminal ) shell during a penetration testing.1 min read·Apr 18, 2018----
AliBawazeEerHashcat In Virtualization environmentwe all know hashcat utilize gpu and to work with cpu in virtualbox or vmware you will need to install the following1 min read·Apr 17, 2018----
AliBawazeEerusing Mimikatz to get cleartext password from offline memory dumprequirements : new version of kali mimikatz : wget https://raw.githubusercontent.com/dfirfpi/hotoloti/master/volatility/mimikatz.py2 min read·Apr 11, 2018--1--1
AliBawazeEerkaizen-ctf 2018 — Reverse Engineer usb keystrok from pcap fileyesterday was a great experience for me to attend all kind of joubert , one of the challenges i could not solve and understand in the…4 min read·Feb 27, 2018--3--3