0xLuc4s

https://0xlcs.github.io/ 0xLuc4s blog, hacking, cyber security 2025-05-13T22:43:02+00:00 0xLuc4s https://0xlcs.github.io/ Jekyll © 2025 0xLuc4s /assets/img/favicons/favicon.ico /assets/img/favicons/favicon-96x96.png Exploring Privilege Escalation with rsync and bash setuid 2024-10-10T01:33:22+00:00 2024-10-10T03:36:18+00:00 https://0xlcs.github.io/posts/rsync-bash-setuid/ 0xLuc4s

In CTF (Capture The Flag) competitions and security assessments, exploiting permission flaws and improper configurations of tools like rsync is a recurring technique for privilege escalation. These flaws are often found in misconfigured systems where permission management does not follow security best practices. The absence of strict permission management can create critical vulnerabilities, pr...

Exploiting Bash Globbing Vulnerabilities: A Comprehensive Analysis 2024-09-27T05:59:25+00:00 2024-09-27T09:13:21+00:00 https://0xlcs.github.io/posts/bash-globbing/ 0xLuc4s

Abstract This article delves into the exploitation of Bash globbing vulnerabilities within a web application’s authentication system. By dissecting a real-world scenario, we demonstrate how such vulnerabilities can be leveraged to escalate privileges and achieve Remote Code Execution (RCE). Additionally, we analyze a Python script designed to brute-force a leaked Certificate Authority (CA) pri...

Command Injection as a Privilege Escalation Vector in Linux Systems 2024-09-27T05:53:22+00:00 2024-09-27T05:53:22+00:00 https://0xlcs.github.io/posts/command-injection-vuln-in-web-service/ 0xLuc4s

Abstract This article delves into the technique of command injection as a means to escalate privileges within Linux systems. Using an illustrative scenario, we analyze how malicious manipulation of input parameters can lead to arbitrary command execution, resulting in elevated access rights. Furthermore, we discuss defensive strategies to thwart such attacks. Introduction Privilege escalation ...

Exploiting Cross-Site Scripting (XSS) for Remote Code Execution in Content Management Systems 2024-09-27T05:50:22+00:00 2024-09-27T05:50:22+00:00 https://0xlcs.github.io/posts/exploiting-cross-site-scripting-for-remote-code-execution/ 0xLuc4s

Abstract This article explores the exploitation of a Cross-Site Scripting (XSS) vulnerability within a Content Management System (CMS), demonstrating how such a flaw can be leveraged to achieve Remote Code Execution (RCE). By injecting malicious scripts, we illustrate the potential compromise of server integrity and security. Additionally, we discuss preventive measures and best practices to mi...

Cracking Bcrypt Hashes with Hashcat: Analysis and Application in Security Scenarios 2024-09-27T04:59:22+00:00 2024-09-27T09:13:21+00:00 https://0xlcs.github.io/posts/cracking-bcrypt/ 0xLuc4s

Abstract This article examines the process of cracking Bcrypt hashes using the Hashcat tool, demonstrating its application in a controlled security scenario. We discuss the structure of Bcrypt hashes, security considerations, and the methodologies employed to perform effective brute-force attacks. Additionally, we explore best practices for strengthening password storage mechanisms. Introductio...