Misc

Deep dives into offensive and defensive techniques // the stuff that doesn’t fit in a writeup but matters just as much.

Techniques

TopicTagsDescription
Process Hardeninghidepid, argv masking, /procHow process snooping works, why pspy captures passwords, and how to stop it
UNION-Based SQL InjectionSQLi, UNION, MySQL, GROUP_CONCATUpgrading blind SQLi to reflected extraction — column count, reflected positions, cross-database queries