- Red Teamer
- CyberSecurity Researcher
- Offensive Cyber Security Engineer, Passionate about the inner workings of computers ;)
- Focused on web security, network security, reverse engineering, and malware analysis
- Attracted by state-sponsored threat actors 😉
- Former Instructor and penetration tester at Semicolon Academy
- Former Red Teamer at Covéa
- Ingénieur Civil des Mines (ICM) - École des Mines de Saint-Étienne
- Electrical and Telecommunications Engineer - Lebanese University
About
More articles from My Blog
UpDown From Hack The Box - Medium Linux Machine
Gaining access to a development web application's source code through an exposed .git repository, I discovered a time-limited file upload vulnerability through static code analysis. I exploited this vulnerability to gain access as the www-data user. By exploiting a setuid binary and the input() function behavior in Python 2, I was able to locally pivot to the developer user. Finally, I elevated my privileges to root by exploiting the easy_setup utility.
Shoppy From Hack The Box - Easy Linux Machine
Exploiting NoSQL injection to bypass the login page and gain access to Josh's credentials. Using Josh's credentials, we were able to access the internal chat web app, where we were able to obtain Jeager's leaked credentials and gain access to the machine. A weak password manager C++ application was used to gain access to a Docker container with the user deploy. Once we were inside the Docker container, we were able to escape from it to gain access as the root user.