Noureldin Ehab | Creeper.exe

Pinned

CVE-2021–40444 MSHTML vulnerability (RCE)

Microsoft MSHTML Remote Code Execution Vulnerability — Technical Explanation (According to Microsoft) The exploit document uses an external oleObject relationship to embed exploitative JavaScript within MIME HTML remotely hosted content that results in (1) the download of a CAB file containing a DLL bearing an INF file extension, (2) decompression of that CAB file, and (3) execution of a function within that…

Cve

3 min read

CVE-2021–40444 MSHTML vulnerability (RCE)

Apr 23

SQL injection UNION attack, retrieving data from other tables (walkthrough)

Portswigger Academy | SQLi Lab — WhoAmI Hey, I am Nour I am a Software engineering student, and here are some of the communities that I am part of: IBM Community leader and IBMZ Student Ambassador AWS Community Builder Microsoft Student Ambassador also, I love solving and creating OSINT CTFs at @Hacktoria connect with me on LinkedIn…

Sql Injection

5 min read

Apr 19

SQL injection UNION attack, finding a column containing text (walkthrough)

Portswigger Academy | SQLi Lab — WhoAmI Hey I am Nour I am a Software engineering student and here are some of the communities that I am part of: IBM Community leader and IBMZ Student Ambassador AWS Community Builder Microsoft Student Ambassador also, I love solving and creating OSINT CTFs at @Hacktoria connect with me on LinkedIn…

Information Security

5 min read

SQL injection UNION attack, finding a column containing text (walkthrough)

Mar 29

Why would you join the AWS community builders program?

AWS Community Builder — WhoAmI Hey, I am Nour, I am a Second Year Software Engineering student who is interested in cyber security especially red teaming, and I am an “IBM Cyber Security Student Community” Leader, IBM Z Student Ambassador, a CTF player (Try Hack Me), a CTF creator @Hacktoria AND an AWS COMMUNITY BUILDER…

AWS

2 min read

Why would you join the AWS community builders program?

Feb 5

SQL injection UNION attack, determining the number of columns returned by the query (Walkthrough)

Portswigger Academy | SQLi Lab — WhoAmI Hey I am Nour, I am a Second Year Software Engineering student who is interested in cyber security especially red teaming, and I am an “IBM Cyber Security Student Community” Leader where we learn cyber security together, also I am an AWS Community Builder and a CTF player (Try Hack…

Writeup

4 min read

SQL injection UNION attack, determining the number of columns returned by the query (Walkthrough)

Jan 26

Pwnkit Local Linux Privesc Affecting Most Distros CVE-2021–4034 (12-year-old vulnerability?!)

WhoAmI Hey I am Nour, I am a Second Year Software Engineering student who is interested in cyber security especially red teaming, and I am an “IBM Cyber Security Student Community” Leader where we learn cyber security together, also I am an AWS Community Builder and a CTF player (Try Hack…

Linux

2 min read

Jan 23

🐧Essential Linux Commands + Interactive Challenge

WhoAmI Hey I am Nour, I am a Second Year Software Engineering student who is interested in cyber security especially red teaming, I am an “IBM Cyber Security Student Community” Leader where we learn cyber security together, also I am an AWS Community Builder and a CTF player (Try Hack Me) …

Linux

5 min read

Jan 21

🐧How to Learn Linux?

Linux

4 min read

Published in InfoSec Write-ups

·Jan 9

XSS Attack! TryHackMe Writeup/Walkthrough

Introduction It is an easy room that teaches us about XSS made by Thexssrat, feel free to ask me about anything on Twitter or Linkedin Note: To access the OWASP top 10 juice shop type the try hack me machine IP in the browser and make sure you are connected to…

Xss Attack

4 min read

Published in InfoSec Write-ups

·Jan 6

HackerNote Try Hack Me (Write-Up/ Walkthrough)

Introduction It is a medium room about a custom web application, introducing username enumeration, custom wordlists and a basic privilege escalation exploit, feel free to ask me about anything at Twitter or Linkedin Task 1 Reconnaissance The first thing we need to do in any CTF is to scan the open ports using Nmap…

Tryhackme

8 min read