3xpl01tc0d3r

Hello All, In this blog post, we will explore the Unauthenticated Remote Code Execution vulnerability discovered by the WIZ team in Azure Open Management Infrastructure (OMI) application that was assigned a CVE ID - CVE-2021-38647. The blog post published by the WIZ team contains all the details that are required to exploit the vulnerability if a vulnerable instance is available. While reading the blog post, we thought of reproducing the scenario and create some quick PoC to exploit the vulnerability. We are releasing Proof of Concept (PoC) code in PowerShell & Python. The PoC code is published on the Github repo . About Azure Open Management Infrastructure (OMI) OMI is a UNIX/Linux application installed on the Azure UNIX/Linux VM that allows users to manage the machine & configuration remotely & locally. It is equivalent to Windows WMI that uses the Common Information Model (CIM). It runs with root privileges. The OMI application gets installed automatically when service...

Hello All, Introduction The purpose of this post is to write the review about  Attacking and Defending Active Directory Lab  course which was hosted by  Pentester Academy  but now offered directly by Altered Security  & designed by  Nikhil Mittal . This course is all about performing Red Teaming assessment with assume breach mentality and completing the objectives which are like exercise after each topic. There are 3 options to opt for the labs 30 Days, 60 Days, 90 Days. You can choose any option depending on the time you will spend in the labs and watching the video tutorials. I opted for 30 Days lab as I had already completed the Windows Red Team Lab  & knew most of the concepts about the active directory attacks. I have also wrote the review about  Windows Red Team Lab  course you can click here to read. The reason I opted for this course was to clear & improve my conceptual knowledge about the topics covered in the cours...

Hello All, It been long time since I wrote my last blog. Hopefully I will again get back on track and write some more blogs post soon which are in my to-do list. So without wasting more time lets focus on the Windows Red Team Lab Journey. Introduction The purpose of this post is to write the review about  Windows Red Team Lab course which was hosted by  Pentester Academy  but now offered directly by  Altered Security  & designed by Nikhil Mittal . This course is all about performing Red Teaming assessment with assume breach mentality and capturing the flags. There are 3 options to opt for the labs 30 Days, 60 Days, 90 Days. You can choose any option depending on the time you will spend on the lab and prior knowledge about the red team like assessment. I opted for 90 Days lab as I knew I will only be able to spend time in night after office & my goal was to get all the flags from the lab. What is Red Team ? Red team is a independent group whic...