skn0x

breaking things to understand them

SIEM investigation using ELK to detect C2 communication. BITSAdmin abuse, Pastebin payloads, and MITRE ATT&CK mapping.

Analyzing anomalous process execution on a compromised host using Splunk for threat detection and investigation.

Real-world exploitation of a critical SQL injection in Zabbix 7.0.0. From API authentication to privilege escalation and RCE attempts in production.