root@n16hth4wk-sec:~# cat about.txt
Welcome to my corner of the internet.
I’m nighthawk, an offensive security practitioner documenting penetration tests, red-team techniques, CTFs, vulnerable machines, security research and things I break while learning.
Hack. Enumerate. Exploit. Repeat. 💀
root@n16hth4wk-sec:~# whoami
```
┌─[ identity ]
│
├── Name : Adebayo Segun
├── Alias : nighthawk
├── Role : Offensive Security
├── Focus : Red Team Operations
│
├── Certifications
│ ├── OSCP
│ ├── LPT
│ └── CPENT
│
└── Status : [ OPERATIONAL ]
```
```
┌─[ arsenal ]
│
├── Web Security
├── API Security
├── Active Directory
├── Privilege Escalation
├── Lateral Movement
├── Network Security
├── Vulnerability Research
└── CTF / Lab Environments
```
root@n16hth4wk-sec:~# ./links.sh
- GitHub: github.com/n16hth4wk07
- Twitter: @n16h7hawk
root@n16hth4wk-sec:~# ls -la ./writeups
drwxr-xr-x HackMyVM/
drwxr-xr-x HackTheBox/
drwxr-xr-x TryHackMe/
drwxr-xr-x ProvingGrounds/
drwxr-xr-x VulnHub/
drwxr-xr-x PwnTillDawn/
drwxr-xr-x CyberTalent/
drwxr-xr-x CTF/
drwxr-xr-x Articles/
./TryHackMe
| Date | Machine | Focus |
|---|---|---|
| 09 Oct 2022 | Relevant | Windows |
| 10 Oct 2022 | Internal | WordPress / Jenkins / Port Forwarding |
| 12 Oct 2022 | PickleRick | Linux |
| 13 Nov 2022 | Cold VVars | tmux |
| 28 Dec 2022 | HackPark | Windows / BlogEngine.NET |
| 28 Dec 2022 | Tomghost | Tomcat / AJP13 / PGP |
| 23 Feb 2023 | Madness | Steganography / Screen2Root |
| 27 Feb 2023 | CherryBlossom | Steganography / Sudo |
./ProvingGrounds
| Date | Machine | Focus |
|---|---|---|
| 14 Oct 2022 | NoName | Command Injection |
| 23 Dec 2022 | Twiggy | Salt REST API ACE |
| 23 Dec 2022 | Helpdesk | ManageEngine SD+ |
| 26 Dec 2022 | Fail | rsync / fail2ban |
| 27 Dec 2022 | Nibble | PostgreSQL RCE |
| 27 Dec 2022 | Wombo | Redis RCE |
| 28 Dec 2022 | Banzai | MySQL UDF |
| 29 Dec 2022 | Dibble | Node.js RCE |
| 29 Dec 2022 | Zino | File Upload |
| 29 Dec 2022 | Clamav | Sendmail / ClamAV |
| 30 Dec 2022 | Hetemit | Misconfigured Service |
| 01 Jan 2023 | Peppo | Ident / Docker |
| 02 Jan 2023 | ZenPhoto | PHP RCE |
| 03 Jan 2023 | Readys | Redis LFI2RCE |
| 03 Jan 2023 | Clyde | Erlang Cookie RCE |
| 04 Jan 2023 | Sorcerer | SCP |
| 05 Jan 2023 | Nukem | DOSBox |
| 06 Jan 2023 | Sybaris | Redis |
| 06 Jan 2023 | Walla | Python Module Hijacking |
| 07 Jan 2023 | Hunit | Git SSH Keys |
| 07 Jan 2023 | Tico | NodeBB |
| 08 Jan 2023 | Pelican | gcore |
| 08 Jan 2023 | Snookums | RFI |
| 09 Jan 2023 | Bratarina | OpenSMTP RCE |
| 10 Jan 2023 | Wheels | XPath Injection |
| 10 Jan 2023 | Flimsy | APISIX RCE / Cronjob |
| 12 Jan 2023 | Exghost | ExifTool RCE |
| 13 Jan 2023 | Squid | Proxy / phpMyAdmin |
| 10 Mar 2023 | SoSimple | WordPress Plugin RCE |
| 14 May 2023 | My-Cmsms | File Upload / RCE |
| 25 May 2023 | Sunsetmidnight | WordPress |
| 23 Aug 2023 | Amaterasu | Path Traversal / Tar Wildcard |
| 24 Aug 2023 | MoneyBox | Weak Password |
| 27 Aug 2023 | Empire-Breakout | Tar PrivEsc |
./HackTheBox
| Date | Machine | Focus |
|---|---|---|
| 23 Oct 2022 | Photobomb | Web |
| 16 May 2023 | Devel | Windows |
| 16 May 2023 | Optimum | Windows |
| 18 May 2023 | Popcorn | Web |
| 19 May 2023 | Bastard | Windows |
| 19 May 2023 | Artic | ColdFusion |
| 01 Jun 2023 | Blocky | Java / Web |
| 02 Jun 2023 | Mirai | IoT |
| 03 Jun 2023 | Bounty | File Upload |
| 04 Jun 2023 | Sense | pfSense / Command Injection |
| 04 Jun 2023 | Valentine | Heartbleed |
| 04 Jun 2023 | Sunday | Finger |
| 06 Jun 2023 | Irked | IRC Backdoor |
| 09 Jun 2023 | Jerry | Tomcat RCE |
| 11 Jun 2023 | Friendzone | LFI2RCE |
| 30 Jan 2024 | Return | Active Directory |
./Other
CyberTalent
- Injector
SQL Injection
CTF
root@n16hth4wk-sec:~# uptime
Knowledge: continuously expanding
Coffee: required
Sleep: optional
OPSEC: mandatory
[+] System operational
[+] Writeups online
[+] More coming...
```