Skip to main content

Posts

Showing posts from February, 2021

My Transition to More Privacy-Focused Internet.

  Back in October 2020 I watched Social Dilemma (A Netflix Documentary) on the recommendation of a friend, it was a documentary made on side effects of social media and those side effects were mentioned by none other than the manufacturers of those tech giants, people holding executive positions, engineering positions in Facebook, Google, YouTube, Pinterest, etc explained how social media is becoming a social dilemma of this century. I won't go into detail about that documentary, but this documentary ignited a spark within me. In response to The Social Dilemma, I've made lots of changes to my internet routine, one of it is, shifting to @DuckDuckGo with @firefox , it's way better than Google if you consider privacy. Must give it a try! — Najam Ul Saqib (@NjmUlSqb) October 12, 2020

Lessons learned while escalating privileges on Vulnversity

After a long while, going through exams and other commitments I decided to play on TryHackMe. This time it was  vulnversity  room, I solved it and learned a lot of new stuff. Infosec is something where you get to learn new things every day (if you're involved in it). So I decided to mention a few things that I learned in this room for others to learn from it. I think most of the room's content was easy, like nmap scan, directory brute-forcing, etc but the last section where we are asked to perform privilege escalation to get the root permissions and ultimately catch the flag was very interesting. I will be talking about "Task 5: Privilege Escalation" here: First of all, the concept of SUID is used here, now what is SUID? I will try to explain it in the simplest of the words, SUID is a bit you can say a flag which is when true on a particular file, it gives that user to execute that file? Now, what's so special about it? This is temporary permission, that file u