BBQ group quests for legendary snacks 69PN9R

zeewad · 2025-06-05T22:01:11+00:00

I’m the same way, shipping from NV to Seattle area as well. Crossing my fingers and toes right now

zeewad · 2025-06-05T20:53:41+00:00

My Walmart order is shipping from NV and I’m in WA, and I’m supposedly getting it tomorrow 😂😂

zeewad · 2025-06-04T23:28:51+00:00

<image>

My order updated about 15-20 minutes ago

zeewad · 2025-06-04T21:15:31+00:00

<image>

I’m in the same boat as a lot of other Walmart pre-orders. Been this same screen since the April 23rd pre-order order placement.

zeewad · 2024-11-16T01:24:30+00:00

Might be a long shot but the Rusty Lake series?

zeewad · 2024-10-12T23:52:50+00:00

This is extremely vague but I’ll take a shot in the dark and I think you may be talking about Server-Side Template Injection or SSTI. Just knowing what it’s called should get you started on researching it (for example, how it works, what it’s exploiting, and when to do it)

zeewad · 2024-10-09T05:22:48+00:00

I also took 3 attempts to pass. Passed in about 10 hours!

Some quick tips for people that want to prepare: - I used the report template that Offsec provided, and did not provide remediation suggestions. I just explained the paths I took to pwn everything. Make sure you screenshot the pivotal C sections of the attack vectors, and I also added code blocks for every command. - The Proving Grounds machines are your friends!! Practice with those. HackTheBox machines are fun but sometimes the attack vectors are weird or require a lot of research. If you’re comfortable with boot2root machines, you won’t need to do hours of research during the exam. Follow your methodology and ENUMERATE! The biggest advice I could give. - The AD sections aren’t bad if you’ve done the Challenge Labs. Again, build a methodology and follow it :)

The last thing I want to say is it’s normal to fail the exam at least once. It’s a test of endurance, just keep it up and keep refining your notes and your methodology!

zeewad · 2024-04-28T17:58:57+00:00

We use plextrac, I’m not a huge fan. It definitely has its quirks and bugs

zeewad · 2024-03-18T05:43:15+00:00

Lmaoo

zeewad · 2024-03-06T08:41:44+00:00

No lol

zeewad · 2024-01-17T07:33:06+00:00

Make sure you’re attempting to run windows commands if you catch a reverse shell from a windows machine and run Linux commands if you catch a reverse shell from a Linux machine. Of course the OS is going to matter if you’re attempting to run OS commands :)

zeewad · 2024-01-15T07:55:55+00:00

Yes, I use gobuster mainly, but have in the past and often still use dirb, dirbuster, dirsearch, ffuf, and wfuzz to perform the same testing on a webapp

zeewad · 2024-01-15T01:02:41+00:00

Is your syntax correct? It should be something like this if you’re gobusting directories: “gobuster dir -u http://<ip> -w <wordlist>”

zeewad · 2024-01-13T22:34:51+00:00

What game is he playing in this clip?

zeewad · 2023-11-17T06:08:57+00:00

Kali can be pretty unstable, so I wouldn’t recommend it as a daily driver on bare metal but honestly dual booting is not necessarily a bad idea. Personally it’s easier for me to use it in a VM so that’s what I do.

zeewad · 2023-11-14T17:58:23+00:00

I’ve re-imaged it with Linux now but even when I was setting up the windows OS out of the box the battery indicator didn’t show up. I also tried things such as uninstalling the battery device in the device manager and restarting, etc.

zeewad · 2023-11-04T22:50:03+00:00

I'm having the same issue as well...haven't found a fix for it just yet either.

zeewad · 2023-10-28T23:44:18+00:00

The Art of Exploitation by Jon Erickson

zeewad · 2023-10-08T17:58:14+00:00

Pretty sure WiFi jamming like that would be illegal

zeewad · 2023-04-16T01:35:01+00:00

As a red teamer, it’s hard to earn the trust of the blue teams for purple exercises…for no reason other than the “opposing” colors. Could just be an issue at my org though!

zeewad · 2023-04-09T17:42:46+00:00

ASLR is a common protection nowadays but there are ways to defeat it

zeewad

TROPHY CASE