Exploiting PHP 8.1.0-dev backdoor Summary This room was created by John Hammond and is an example of what happens when you use outdated, or perhaps even compromised, software. This room highlights PHP version 8.1.0-dev which fell victim to malicious commits on the PHP Github repository that creates a backdoor on any…

A Rick and Morty CTF. Help turn Rick back into a human! This Rick and Morty themed challenge requires you to exploit a webserver to find 3 ingredients that will help Rick make his potion to transform himself back into a human from a pickle. Pickle Rick is a “Difficulty…

Here are my notes for the first chapter of CompTIA PenTest+ Study Guide, 2nd Edition, by MikeMike Chapple and David Seidl. If you’re interested in the other resources I’m using to prepare for this exam, check out my story — Preparing for CompTIA PenTest+. CompTIA PenTest+ objectives covered: Full exam objectives for PT0–002 can…

It was recommended to me by my local cybersecurity community (DC864) that the CompTIA PenTest+ certification is a desirable first step in my cybersecurity journey. CompTIA is certainly a well known certifier in the IT industry. Their certifications bear a fair amount of weight for employers when considering talented professionals…

How I got started… — The process was pretty slow. I was working as a network engineer and starting to delve into coding languages to help automate some work tasks. I began with AutoHotKey and built some fancy (…for me anyway) hotkeys to help speed up some daily workflows (like connecting to my work’s VPN…