Home on @tmajik

Rust for Malware Development with Fibers

Sun, 09 Aug 2026 17:50:00 +0530

A work-in-progress walkthrough of running shellcode in Rust via Windows fibers instead of threads — VirtualAlloc, VirtualProtect, and CreateFiber with a calc.exe payload.

HTB: ServMon

Tue, 08 Jul 2025 12:02:55 +0100

An easy Windows box with multiple enumeration rabbit holes. Features NVMS-1000, FTP, locked SMB, and NSClient++. Foothold gained through FTP-disclosed credentials and NVMS-1000 LFI vulnerability that reveals password lists. Password spraying identifies valid credentials between two users. Local NSClient++ access with exposed passwords enables privilege escalation to root via reverse shell execution.

HTB: Busqueda

Mon, 07 Jul 2025 12:02:55 +0100

HTB: Networked

Mon, 07 Jul 2025 12:02:55 +0100

A marked easy machine that involves exploiting a python eval statement in Searchor 2.4.0 to gain foothold, finding a gitea server and a .git folder; thus finding cleartext credentials, following which you find some administration scripts. Exploiting said administration scripts leads to root.