Home | root💀bl4ck4non-sec:~#

Welcome To My Cyber Security Blog, H4X0R

Yo 👋, Welcome To My Cyber Security Blog I’m BlackAnon. I Post Different Hacking Tricks, Writeups, Articles, Any Stuffs Related To Hacking That I Learn 😉.

Whoami:~#

My Name: Omolewa Samuel
Also Known As: BlackAnon
What Do I Do: CTF / Ethical Hacking / Pentetration Testing
Twitter: https://twitter.com/BlackAnon22
Github: https://github.com/BlackAnon22

Articles:~#

[[September 22 2023]] eJPTv2 Cheat Sheet

echoCTF:~#

[[September 27 2023]] cupidme File Upload OpenSMTPD RCE
[[September 28 2023]] CVE-2020-7247 OpenSMTPD RCE
[[September 28 2023]] Anvil Privilege Escalation

TryHackMe:~#

[[March 03 2023]] Archangel LFI Log Poisoning CronJob SUID Binaries
[[March 03 2023]] IDE Cadever RCE SUDO Privileges
[[March 10 2023]] Chocolate Factory Command Injection SUDO Privileges
[[April 21 2023]] Opacity File Upload Cronjob
[[May 12 2023]] Empline File Upload XXE Linux Capabilities
[[May 14 2023]] CherryBlossom Steganography Crypto Password Cracking Buffer Overflow
[[June 26 2023]] Smag Grotto Wireshark Cronjob SUDO Privileges

Proving Grounds:~#

[[March 01 2023]] Wheels XPATH injection reverse engineering
[[March 01 2023]] Bratarina Opensmtp RCE
[[March 01 2023]] Twiggy salt-api RCE
[[March 01 2023]] Algernon SmarterMail
[[March 02 2023]] Helpdesk ManageEngine ServiceDesk Plus
[[March 03 2023]] Readys Wordpress LFI Redis CronJob
[[March 03 2023]] Squid Squid Proxy PHPMYADMIN
[[March 03 2023]] Nibbles Postgresql RCE SUID Binaries
[[March 04 2023]] Exfiltrated Subrion RCE CronJob Exiftool Vulnerability
[[March 05 2023]] Flimsy APISIX RCE CronJob APT-GET Exploitation
[[March 05 2023]] Snookums RFI MySql
[[June 24 2023]] Sumo ShellShock Outdated Kernel
[[June 25 2023]] CyberSploit1 Linux Outdated Kernel

PwnTillDawn:~#

[[March 05 2023]] Vega Unsecured Credentials Heap Overflow Vulnerability
[[March 05 2023]] Portal FTP
[[March 05 2023]] Pwndrive Academy Weak Authentication Arbitrary File Upload
[[March 05 2023]] Snare RFI Weak File Permissions
[[March 06 2023]] Mr Blue Eternal Blue MS17-010
[[April 09 2023]] JuniorDev Jenkins Command Injection

HackTheBox:~#

[[March 05 2023]] Jerry Tomcat Arbitrary File Upload Default Credentials
[[March 13 2023]] Agile LFI IDOR SudoEdit
[[March 13 2023]] Inject File Upload Directory Transversal Spring Ansible
[[May 15 2023]] Legacy SMB RCE
[[May 15 2023]] Devel File Upload FTP RCE Kernel Exploit
[[September 13 2023]] Shoppy NOSQL Hash Cracking Docker
[[September 15 2023]] Paper Outdated Software Information Disclosure Directory Transversal Polkit
[[September 16 2023]] Blue EternalBlue RCE
[[September 17 2023]] Bastion Weak Authentication Disk Image Weak Encryption
[[September 18 2023]] Optimum Rejetto Outdated Software
[[September 20 2023]] Grandpa Microsoft IIS Potato Attack
[[September 21 2023]] Granny Microsoft IIS Potato Attack
[[September 25 2023]] Arctic Adobe ColdFusion Outdated Kernel
[[October 01 2023]] Sau SSRF Misconfigured Sudo Permissions
[[October 05 2023]] Pilgrimage Sensitive Data Exposure File Upload LFI Cronjob
[[October 08 2023]] Timelapse Anonymous Access Password Cracking Active Directory
[[October 11 2023]] Heist Information Disclosure Password Cracking
[[October 14 2023]] Return LDAP Local Groups
[[October 14 2023]] Love SQLi Arbitrary File Upload Msfvenom
[[October 20 2023]] Analytics RCE Docker Kernel Exploit
[[October 20 2023]] Wifinetic Information Disclosure Wifi Hacking
[[October 20 2023]] CozyHosting Command Injection PostgreSQL Misconfigured sudo permissions
[[October 21 2023]] Keeper Default Creds Information Disclosure Kepass
[[October 22 2023]] Driver Default Credentials Outdated Software
[[October 22 2023]] Antique SNMP Telnet Port Forwarding
[[October 23 2023]] NodeBlog NoSQL XXE Node-Deserialization Misconfigured sudo permissions
[[October 24 2023]] Stocker NoSQL Directory Traversal Misconfigured sudo permissions
[[October 26 2023]] Squashed NFS Arbitrary File Upload
[[October 30 2023]] Busqueda Outdated Software Code Injection Hard-coded Credentials
[[October 31 2023]] Topology Latex Injection Cronjob
[[November 01 2023]] Support Cryptography Information Disclosure LDAP
[[November 02 2023]] SteamCloud Kubelet RCE
[[November 02 2023]] Precious RCE Deserialization
[[November 03 2023]] Photobomb OS Command Injection Misconfigured sudo permissions
[[November 05 2023]] MetaTwo SQLi XXE Weak Credentials
[[November 05 2023]] Pandora SQLi RCE Path Hijacking
[[December 27 2023]] Horizontall Source Code Analysis RCE Misconfigured sudo permissions
[[December 27 2023]] Nibbles Default Credentials RCE Misconfigured sudo permissions
[[December 27 2023]] Bashed OS Command Injection Code Execution
[[February 25 2024]] Surveillance Outdated Software MySQL Misconfigured sudo permissions

CTF Competitions:~#

[[October 05 2022]] ABCCTF 2022
[[October 09 2022]] CyberTalents 2022
[[April 01 2023]] picoCTF 2023
[[May 01 2023]] CyberStarters CTF 2023
[[February 03 2024]] TechStaCon 2024
[[February 20 2024]] LACTF 2024
[[April 02 2024]] picoCTF 2024
[[May 21 2024]] Africa CyberFest CTF
[[August 05 2024]] N00bz CTF
[[November 11 2024]] cruXipher CTF
[[December 01 2024]] World Wide CTF

OverTheWire Labs:~#

[[July 13 2023]] Natas(Web) Labs

Portswigger Labs:~#

[[August 15 2023]] SQLi
[[August 29 2023]] Command Injection
[[September 08 2023]] Access Control
[[October 04 2023]] Path Traversal
[[October 22 2024]] API Testing

PentesterLab Labs:~#

The writeups in this section are for the free exercises and courses available on the PentesterLab platform.

[[August 25 2023]] From SQL Injection to Shell: PostgreSQL Edition
[[August 25 2023]] From SQL Injection to Shell

BlueTeam Labs:~#

Recently, I’ve developed an interest in forensics, sparked by participating in CTF (Capture The Flag) challenges. Now, I explore it for fun and plan to document some of the labs I solve here.

[[August 01 2024]] Memory Analysis - Ransomware