Posts

Another week of learning, another week of improving this site. This time, I came up with the idea to implement a CICD pipeline for the site. I was tired of using SSL and SCP protocol to manually deploy the site repeatedly. The first challenge in this case was finding the solution stack that could best fit my use case. Of course, we can always just go all out and implement all the best products available in the market. But, with a hobby project on my hands, that will be impractical and costly. ...

After mistakenly enrolling for a course for offensive cyber security on Hack the Box Academy, I am here to write my first blog on a box I challenged. Reconnaissance Knowing that my target will be a Linux server and given the IP address, I started with a Nmap scan to see what ports are open and fetch some potentially useful banners. It came to my attention that this is an Apache server - hence I confirmed it to be a web server and ran whatweb for more details on the web infrastructure. Simultaneously, I proceeded with trying to enumerate some directories of the website. I used the common list with gobuster and found some addresses that can be accessed directly through the browser. ...

This website originated from a random weekend thought. Why don’t I build my own website to record what I’ve learned on my way? The idea was all I needed to get started. To make this more of a challenge, I decided that I wouldn’t be using any existing Content Management System (CMS). I wanted to start from scratch and apply as many skills as I learned to get this site online. ...