Homepage on Aditya Telange

A retrospective on the development and impact of evil-winrm-py, a Python implementation of the popular evil-winrm tool for Windows Remote Management.

Discover how a simple manipulation of LinkedIn's search filters allowed access to private connection lists, highlighting the importance of robust access controls.

A developer-friendly mobile-dashboard for Frida to speed up your Android and iOS dynamic instrumentation workflow.

A deep dive into techniques for breaking payload encryption in web applications, including common vulnerabilities and tools used.

Escape is a medium-difficulty Windows machine on Hack The Box that revolves around Active Directory.

Resolute is a medium-difficulty Windows machine on HackTheBox that involves a realistic Active Directory penetration test.

Certified is a Windows machine having misconfigured ACL in Active Directory environment where initial access for a low-privileged user judith.mader is provided.

VMWare Workstation is a popular virtualization software that was recently made available for free personal use after VMWare was acquired by Broadcom.

Setting up a virtual lab for Android App security assessments.

Learn how to set up a virtual webcam on Linux using your Android device’s cameras using scrcpy.

In pentesting assessments and CTFs we always need reverse shells to execute commands on target machine once we have exploited a system and have a command injection at some point in our engagement.

Photobomb is a fun box on Hackthebox where we initially get hardcoded credentials in a Javascript file, which we can use to authenticate with basic auth to access the image resizing tool, which has command injection leading to us getting a reverse shell.

Learn how Android custom ROMs integrate AOSP security patches.

Learn about HTTP security headers and how to configure them for securing web applications.

Adding a Zoom-In effect to post image for websites built with Hugo.

Legacy is a relatively easy box which has SMB running on Windows XP(2000) OS.

Lame is the 1st box on HackTheBox which requires only one exploit in Samba to obtain root access.

The Solution is shared considering CAN I SHARE MY SOLUTIONS?

The Solution is shared considering CAN I SHARE MY SOLUTIONS?

The Solution is shared considering CAN I SHARE MY SOLUTIONS?

The Solution is shared considering CAN I SHARE MY SOLUTIONS?

The Solution is shared considering CAN I SHARE MY SOLUTIONS?

The Solution is shared considering CAN I SHARE MY SOLUTIONS?

The Solution is shared considering CAN I SHARE MY SOLUTIONS?

Horizontall is a fun box which has an API, vulnerable to Improper Access Control and RCE.

Box Info Name: Forge OS: Linux Difficulty: Medium IP: 10.10.11.111 Points: 30 Machine Creator: NoobHacker9999 Introduction Forge is a fun box on Hackthebox that has a File Upload functionality which is vulnerable to SSRF.

Previse is a fun Linux box on HackTheBox that has insecure redirect implementation which leaks information on the page.

BountyHunter is a fun Linux box on HackTheBox that has XXE injection on a PHP form, which exposes DB credentials.

Explore is a fun Android box that has an Open Port Vulnerability because of a popular file manager application.

Cap is a fun box where we find a flask web app which lets us download network log, where we find FTP and SSH credentials for user nathan.

Pit is a fun box where SNMP Data reveals that seeddms instance is running, which is vulnerable to RCE.

Knife is a fun box which uses a PHP version having backdoor, which leads to RCE.

Love is a fun box where we find a hidden subdomain that helps us retrieve Forbidden pages, where admin credentials are leaked of another service.

Tenet is a fun box where we find a backup of a staging PHP file which loads external code via deserialization, which leads to code-execution and a reverse shell.

Ready is a fun box which is using an outdated GitLab community version.

Watermarking images in Hugo with your logo/text for copyright protection and marketing of digital works.

On 13th Feb 2021 PaperMod went viral !!!

The Solution is shared considering CAN I SHARE MY SOLUTIONS?

The Solution is shared considering CAN I SHARE MY SOLUTIONS?

The Solution is shared considering CAN I SHARE MY SOLUTIONS?

The Solution is shared considering CAN I SHARE MY SOLUTIONS?

The Solution is shared considering CAN I SHARE MY SOLUTIONS?

The Solution is shared considering CAN I SHARE MY SOLUTIONS?

The Introduction to what CAF is w.r.t AOSP development

Using Vercel’s Built-in HTTP Headers to get Usage Analytics with help of Serverless API

Using Github’s workflow actions to set-up a High Speed Temporary File Sharing Platform

Sometimes we need to add some pre-built apk in our build because the source isn’t available or it is more easy to just pull the binaries from, and add it to our build.This post says how to do it.

Intro Many a times we need to open some External Link in New Tab for the convenience of the Visitor .

AOSP requires some dependencies and libraries in-order to build properly.

The Introduction to what AOSP is