Shahrukh Iqbal Mirza – Medium

Shahrukh Iqbal Mirza

Shahrukh Iqbal Mirza

Open-Redirect Vulnerability in Instagram’s Mobile Application

In this blog, I’ll be discussing an Open-Redirect vulnerability that I found out a few days ago in Instagram’s Android Application.

4 min readMay 16, 2021

--

2

Open-Redirect Vulnerability in Instagram’s Mobile Application

--

2

Shahrukh Iqbal Mirza

Your Source Code might be Git’ing Exposed — Hacking Publicly Exposed Git Repositories

Git is a Version Control System used to track and monitor modifications made in files/folders during application development. Git works by…

4 min readApr 6, 2021

--

Your Source Code might be Git’ing Exposed — Hacking Publicly Exposed Git Repositories

--

Shahrukh Iqbal Mirza
in
System Weakness

Pwn3d In Seconds — Attack of the Rubber Duck

In this blog, we’ll be looking at the USB Rubber Ducky or the BadUSB. We’ll start by an introduction to BadUSBs, what makes USBs “Bad” and…

5 min readApr 2, 2021

--

1

Pwn3d In Seconds — Attack of the Rubber Duck

--

1

Shahrukh Iqbal Mirza
in
System Weakness

Walking Along the PATHS of the Administrator

In this blog, we’ll discuss how service paths can be abused to escalate privileges in Windows systems. As usual, we’ll look at the…

6 min readApr 2, 2021

--

Walking Along the PATHS of the Administrator

--

Shahrukh Iqbal Mirza

Who let the Dogs Out — Active Directory Domain Enumeration & Exploitation using BloodHound

In this blog, we will have an in-depth look at BloodHound. We will start by discussing what BloodHound is, how to install and configure it…

8 min readApr 2, 2021

--

Who let the Dogs Out — Active Directory Domain Enumeration & Exploitation using BloodHound

--

Shahrukh Iqbal Mirza

How to Exploit a Simple Stack-Based Buffer Overflow Vulnerability

In this blog, we will be discussing the basics of exploit development by exploiting a stack overflow vulnerability in a simple application…

9 min readApr 1, 2021

--

How to Exploit a Simple Stack-Based Buffer Overflow Vulnerability

--

Shahrukh Iqbal Mirza

Let the Secrets “SYNC” In — The DCSync Attack

In this blog, we will be focusing on abusing the Replication of Directory Services feature of an Active Directory environment. As always…

4 min readApr 1, 2021

--

Let the Secrets “SYNC” In — The DCSync Attack

--

Shahrukh Iqbal Mirza

Roasting the Three-headed Guard of Active Directory — Kerberoasting

This attack targets the Kerberos Authentication Protocol in an Active Directory environment, and attempts to retrieve the service…

8 min readApr 1, 2021

--

Roasting the Three-headed Guard of Active Directory — Kerberoasting

--

Shahrukh Iqbal Mirza

Abusing the Rights and Privileges of DNS Admins to Own the Domain Controller

This attack demonstrates how an attacker can abuse some AD misconfigurations and rights of the DNS Admins group in a Windows environment…

5 min readMar 31, 2021

--

Abusing the Rights and Privileges of DNS Admins to Own the Domain Controller

--

Shahrukh Iqbal Mirza

ATTACKING WINDOWS 10 USING MIMIKATZ

With the exponential rise in cyber-attacks, and the attackers using defense evading tools and frameworks; it has become important to know…

4 min readMar 30, 2021

--

1

ATTACKING WINDOWS 10 USING MIMIKATZ

--

1

Shahrukh Iqbal Mirza

Shahrukh Iqbal Mirza

A passionate hacker/pentester/red-teamer, part-time CTF player and ocassional bug bounty hunter. Advocate for “Hacking Is NOT A Crime.”

Help
Status
About
Careers
Blog
Privacy
Terms
Text to speech
Teams