Nigerald's Blog

I’ve been digging a little deeper into .NET stuff recently (as anybody could tell with my recently blog posts), and I inevitably ended up looking at some more Windows internals. I now present, a modified implementation of SharpHellsGate. I decided to take a look at this because I liked Dinvoke... [Read More]

It’s been a month since my first part to this “series” and now I’m getting more familiarized with this stuff. Last post covered Platform Invoke (Pinvoke), Remote Process Injection, and Donut. This post will focus on taking these techniques to the next level with the following: Dynamic Invocation (Dinvoke) and... [Read More]

With all the Hack The Box boxes I’ve done, I’ve rarely ran into issues with Antivirus. Typically these boxes teach some sort of methodology or technique; therefore evasion is rarely implemented. However, evasion is an interesting concept; if your payload is signatured by AV and you cannot run it on... [Read More]

Sink is an insane level box on HackTheBox that was incredibly fun and difficult. The unique technologies and attack vectors taught me a lot about cloud stuff and HTTP request smuggling; a topic I was previously vaguely familiar with. [Read More]

Multimaster is an insane level box on HackTheBox that was pretty difficult. It used a variety of technologies and techniques in order to gain Domain Admin. There wasn’t a significant emphasis on the Active Directory aspect, but it was still very interesting and helped me refine some of my skills.... [Read More]