Directory Traversal, File Inclusion, and The Proc File System

Part of a login portal security series, covering how login submissions, account registration, and password reset flows can leak valid usernames through overly helpful server responses.

Learn about administrative access and Remote Code Execution (RCE) exploitation from a recent Web Application Pentest.

An early look at Python in Excel, where PY() formulas run code in Microsoft-hosted remote containers, with initial red team notes on exploring the runtime environment and capabilities.

NetSPI releases Dockerized Linux hacking labs: vulnerable images with a Metasploit attacker container let learners safely practice exploiting misconfigured services like Rsync.

The final Linux case studies post builds a vulnerable Kali lab server, recreating the Rsync, NFS, phpMyAdmin, and sudo misconfiguration scenarios from the series for safe hands-on practice at home.

This Linux case study covers finding SSH servers, running dictionary attacks against weak passwords, then abusing overly permissive sudo rules on sh, vi, python, and nmap to escape to a root shell.