Recent content on 0xInfection's Blog — Ramblings of an Infected Geek
Hey everyone! It’s been a while. I’m really excited to finally push out something that’s been cooking on my machine for way too long – XSRFProbe v3.0 . 
 For those who don’t know, XSRFProbe is a CSRF audit and exploitation toolkit I first released back in 2018. The last stable release, v2.3.1, went out in January 2020. That’s a little over six years of radio…
Hey everyone! I’m so stoked to finally share this blog post that’s been sitting in my drafts since 2023. Life got busy and I lost my writing mojo for a bit, but I’ve finally gathered enough energy to finish this one up! 
 Today’s post explores the bypasses I discovered for the OWASP CRS (Core Rule Set) Project during 1337UP0522 live hacking event hosted by The Paranoids…
This post is about two vulnerabilities that I researched on a year back in the FreeSWITCH VoIP server that were fixed and disclosed publicly a few weeks ago. Both of the vulnerabilities were issues that affected the SIP functionality in all versions below v1.10.7 and were categorized under CWE-287 . 




 
 
 Background
 
 
 The story dates to a year ago,…
This blog is the fifth installation of the “Offensive WMI” series that I’ve been writing on, and this post will cover Active Directory enumeration. 
 Active Directory (AD) is Microsoft’s implementation of a directory and IAM service for Windows domain networks – which enables admins to manage permissions and access to resources. Anything used for managing multiple…
This is the fourth part of the “Offensive WMI” series which will focus a bit more on information gathering and enumeration. WMI provides a plethora of classes from which we can enumerate a lot of stuff. So let’s dive in without wasting any more time. 




 
 
 Gathering basic information
 
 
 In our previous blogs, we have already seen a…
This is the third instalment of the “Offensive WMI” series (the 2nd is here ), and this blog will focus on interacting with the Windows Registry. A useful thing to know before we start, MITRE ATT&CK classifies querying of registry values under T1012 and its modification under T1112 . 
 Let’s dive in. 




 
 
 What is Windows Registry?
 
…
This blog post is the second part of the “Offensive WMI” series (the first is here ), and this article will be focusing on the 3 major components in WMI that we’d be majorly dealing with. Throughout the article, we’ll be using both WMI and CIM cmdlets interchangeably so that we’re well-versed with both cmdlet types. 




 
 
…
This blog post is the first of a many part series on WMI and is intended for fairly new audiences. A basic understanding of Powershell will definitely help the reader while going through the blog, however, it is not a requirement. That’s it, let us jump into the real stuff. 




 
 
 Introduction
 
 




 
 
 Why WMI?
 
…
Development is a important task. But mindful secure development is much more important. In this quick blog post, I detail an unusual way in which I was able to escalate access to several production instances behind a properly secured network. 




 
 
 How it started.
 
 
 It all started with me casually checking some traffic data for a tool I authored on…
Hey folks, 
 We all have heard of CI/CDs right? I was exploring GitHub Actions and what I found was the fact that it was an extremely underrated resource which is not quite widely used for general purposes by people. In this blog post, I aim to detail how people can really benefit from CI/CDs with GitHub Actions in focus, and how one can fully exploit the resource to get the most out of it.…
Hi folks, 
 Today in this post I am going to be detailing about my recent experiments with web application firewalls (WAFs) focusing on a specific type of side channel attacks, namely, timing. In my opinion, this field hasn’t been studied actively and the results can be more lethal than you’re expecting. This post is already long, so lets get started rightaway. :) 




…
Hi, I’m Pinaki a.k.a. 0xInfection! :) 
 
 Twitter : twitter.com/0xinfection 
 GitHub : github.com/0xinfection 
 Keybase : keybase.io/0xinfection 
 LinkedIn : linkedin.com/in/0xinfection/ 
 Contact Email : 0xinfection [at] gmail.com 
 PGP Key : Here