Becoming a DevOps engineer in 2023: top 10 skills to learn

I often hear the same question, what are mandatory skills needed becoming a DevOps engineer or developing and operating specialists, especially for those who coming from strictly programming area. Where to begin for fresher or what is the best start point for someone how is a newbie in IT on his own? I can say … Read more

Wireshark dumpcap: packet capture cli automation

Wireshark is amazing tool for any network nerd. It brings a simple way to visualize a flow of tons of packets in and out from network interface. But what if we need a simple command line way to interact to Wireshark functionality just using a Linux terminal or IoT simple device. Installing and configuring Wireshark … Read more

Bypass PHP File Upload Filters on Apache

Apache is one of the most popular http server nowadays. It hosts a hundreds of thousands applications, most of them written in PHP. Today I will present you how to bypass PHP file upload filters using MIME-type configuration changes. This short directive, or, depends on service version, tells httpd to specify the Content-Type header for … Read more

Windows privilege escalation: Unquoted Service Path

🤓Title: Windows privilege escalation: Unquoted Service Path 🤓Vulnerability: privilege escalation 🤓Description: In Microsoft Windows when a service whose executable path contains spaces and isn’t enclosed within quotes, leads to a vulnerability known as Unquoted Service Path. The processthreadsapi.h creates a new process and its primary thread. The new process runs in the security context of the … Read more