2017 – Tunelko. Random (in)security.

VulnDocker VM, NotSoSecure. Easy mode.

A new VM is released by NotSoSecure company called VulnDocker. What a coincidence, you're auditing docker security trying to learn and understand and a vm appears as challenge flavour. Perfect. On boot we can see the modes (yes, VM has…

CTF

hackburger.ee [all writeups]

I've decided to publish http://hackburger.ee writeups https://gist.github.com/tunelko/13766c5eaba923811ff7da9b520870bd

XSS

XSS – Security Update For EasySocial 2.0.19

Hi, Recently during a pentest on a web application i've discovered a little bug on joomla component called com_easysocial. Basically the component lets people to join to social network uploading photos, posting messages on a wall, etc. On one of…

CTF Wargame

S21SEC [DCS17CTF] – Namibia

Hi mates, During my spare time i have tried some tasks from DSC17 CTF by S21sec. I will comment here on those in which I found more difficult or fun. FBCTF was present as platform so from here tasks names will…

CTF Wargame

BITSCTF – Tom and Jerry (50 points)

I have a little time to join on BITSCTF with my team defconUA and want to put some writeup on one of the task i was working. They give us a pcapng named 'Cat.pcapng'. Ok, challenge name is "Tom and…

CTF labs Wargame

IHackLabs, aprende de los mejores

Introducción Recientemente he probado "IHackLabs", una plataforma de aprendizaje, laboratorios y certificaciones para estudiantes y profesionales. Me he reunido con Diana y Carlos, la gente detrás de esta idea, en "Sh3llCON2017 Congreso de Seguridad". Todo el trabajo en torno a…