https://aegrah.github.io/tags/windows.htmlRecent content in Windows on RGROSECHugo -- gohugo.ioenCopyright © Ruben GroenewoudSun, 21 Aug 2022 07:00:00 +0200https://aegrah.github.io/post/2022-03-30-timelapse-htb-walkthrough.htmlSun, 21 Aug 2022 07:00:00 +0200https://aegrah.github.io/post/2022-03-30-timelapse-htb-walkthrough.html Welcome back! Today we are going to solve the Timelapse machine from Hack The Box. Timelapse is an easy box which focuses on accesible SMB shares and a lot of hash cracking to get the initial foothold. We then find configuration files that allow us to login to the system as the administrator user. Foothold Let's start off with a basic nmap scan. We use -Pn to skip host discovery, -sC to enumerate services, -sV to enumerate service versions and -oN to write to Nmap readable format.https://aegrah.github.io/post/2022-02-25-x86-windows-buffer-overflow-pt2.htmlMon, 25 Apr 2022 13:33:38 +0200https://aegrah.github.io/post/2022-02-25-x86-windows-buffer-overflow-pt2.html This tutorial is part two of a two part series that focuses on binary exploitation, in particular on x86 stack-based Windows buffer overflows. The first part of the series focuses on the theory behind the topics that will be described in this tutorial, and can be found here. The information provided in this blog is based on the notes and cheatsheets I wrote while studying for the Offensive Security Certified Professional (OSCP) exam.https://aegrah.github.io/post/2022-02-25-x86-windows-buffer-overflow-pt1.htmlMon, 25 Apr 2022 13:33:35 +0200https://aegrah.github.io/post/2022-02-25-x86-windows-buffer-overflow-pt1.html This tutorial is part one of a two part series that focuses on binary exploitation, in particular on x86 stack-based Windows buffer overflows. This part of the series focuses on the theory behind memory, processors and buffer overflows. We first take a look at some simple c programs and assembly, then dive into the different memory regions and how processes are executed. We then take a look at a vulnerable program in a debugger to see what a buffer overflow looks like.https://aegrah.github.io/post/2022-02-17-windows-privilege-escalation.htmlThu, 17 Feb 2022 14:07:56 +0200https://aegrah.github.io/post/2022-02-17-windows-privilege-escalation.html This post is based on the notes and cheatsheets I wrote while studying for the Offensive Security Certified Professional (OSCP) exam, and can be used as a brief reference while looking for basic Windows privilege escalation methods. The contents of this blog originate from the “Windows Privilege Escalation for OSCP & Beyond” course created by Tib3rius. The course is available at Udemy and can be found here. Tib3rius also created a free room at TryHackMe that can be leveraged to practice the techniques outlined in his course and this cheatsheet.