Vulnerability
DNS Zone Transfers: Finding and Fixing Unrestricted AXFR
How I test DNS zone-transfer permissions, interpret the response, and restrict transfers without breaking secondary DNS servers.
Vulnerability
Vulnerability analysis, exploitation notes, and defensive insight.
Vulnerability
SNMP Exposure: Using Nmap and snmpwalk to Check Access
How I check SNMP exposure, interpret UDP scan results, and distinguish read access from dangerous management permissions.
Vulnerability
Kerberoasting, Silver Tickets, and Golden Tickets: Different Keys, Different Risks
How I separate Kerberoasting from Kerberos ticket forgery, check the prerequisites, and collect evidence that supports each finding.
Vulnerability
Server-Side Template Injection: Testing the Template Boundary
How I identify server-side template injection, reproduce it in a small Flask lab, and fix the separation between template source and data.
All 4 posts shown