Jesús Aguirre’s Post

Is Your Container Image Really Distroless? Containerization improved application security by providing engineers with greater control over runtime environments, but maintaining security requires significant time investment. "Distroless" images promise to reduce this time by eliminating most software. Multi-stage builds and BuildKit enable practical creation of such images, and init containers help remove the need for general-purpose software, enhancing security.

So I got Kali Nethunter installed on my Pixel 3XL. This was not easy, but I learned A LOT: unlocking bootloaders, bootloops, loading images from recovery, scrcpy, Lineage, TWRP, Magisk, and much more! Now, what to do with it? Hrm... Update: Below are most of the resources I used to accomplish this task. Also note, this voids the warranty on your phone and there is a significant risk of bricking your phone, so use caution! https://lnkd.in/ecq5TzdQ - Install LineageOS on Google Pixel 3 XL https://lnkd.in/eS87gUuS - Installing Nethunter on Google Pixel https://lnkd.in/e6N8YZrV - How I became a l33t h4x0r by installing Kali Nethunter on LineageOS on a Pixel 3 https://lnkd.in/eKWZksR4 - NetHunter Hacker II: How to install Kali NetHunter on rooted OnePlus 7 Pro https://lnkd.in/eEq4TDbg - Unlock the Bootloader on Your Pixel 3 or 3 XL — a Beginner's Guide

I watch this video during riding a train to work. To refresh my knowledge about cache :) https://lnkd.in/gqKefvtk

Well then, for a medium level machine this one was actually rather difficult. Standard enumeration to begin with, discovery of a subdomain that leads to a teamcity website. Abuse of a exploit to achieve account takeover. SSH to user flag, post enumeration reveals a 2nd subdomain. And finally what took hours; exploiting docker.

Here's a basic program example that gives perimeter and area by taking length and breadth by user.

This is the 3rd Tutorial in Redirect Series. In here I wrote about Nested Routes with Authentication Redirection using Guards. As always you find the complete source code here: https://lnkd.in/gAyE6WPj #Flutter #Riverpod #GoRouter #Navigation #Redirect

The majority of the problems can be solved with simple solutions💡

Foothold is pretty easy to get: enumerate and look for a CVE. For user: take a look at what you can access. Root: read up on the service it's running, maybe you can exploit it somehow, or just escape it entirely? You get to choose. Good luck! #hackthebox

Paper is tricky, because the CVE is not reported by LinPeas anymore for privilege escalation. Tip: check for defunct usernames -> go search on the Internet

A new tech tidbit on Techquickie! Here’s What All Those Connectors On Your PC Do