Posts on SOPHY'S CYBERLAB

Regulatory Compliance & Secure System Architecture (NIST/ISO 27001)

Mon, 20 Apr 2026 00:00:00 +0100

Objective: To architect a secure, compliant SaaS environment aligned with ISO 27001 and the NIST Cybersecurity Framework.

Web-to-System Pivot via Command Injection

Tue, 30 Sep 2025 10:00:00 +0100

Objective: To exploit a Command Injection vulnerability in a web application to bypass input filters and establish a persistent Remote Shell.

Post-Exploitation & Sensitive Data Exfiltration

Sat, 20 Sep 2025 10:00:00 +0100

Objective: To leverage administrative access to extract the system’s “Shadow” file, demonstrating the ability to harvest encrypted credentials for offline analysis.

Fowsniff — Credential Harvesting & Password Cracking

Fri, 17 Apr 2026 10:00:00 +0100

Objective: To exfiltrate and crack leaked credentials from unencrypted data sources to perform authenticated service attacks.

Mr. Robot — Web Exploitation & System Compromise

Thu, 26 Mar 2026 10:00:00 +0100

Objective: To demonstrate a full-stack compromise, from website reconnaissance and credential harvesting to gaining root-level access on a Linux server.

Kenobi — Exploiting NFS Misconfigurations & Privilege Escalation

Wed, 25 Mar 2026 10:00:00 +0100

Objective: To demonstrate the use of insecure service configurations and SUID binaries to perform cross-protocol exploitation and gain root access.

Blue: EternalBlue Exploitation & Privilege Escalation

Fri, 20 Mar 2026 10:00:00 +0100

Objective: To identify and exploit the MS17-010 (EternalBlue) vulnerability on a legacy Windows target to achieve SYSTEM-level access and credential exfiltration.

Exploiting Infrastructure Vulnerabilities (Backdoor Access)

Fri, 12 Sep 2025 10:00:00 +0100

Objective: To execute a remote command execution (RCE) exploit against a backdoored FTP service to gain unauthorized administrative access to the target host.

Service Enumeration & Vulnerability Research

Tue, 05 Aug 2025 10:00:00 +0100

Objective: To perform deep-packet inspection and service fingerprinting on a target host to identify exploitable entry points within the infrastructure.

Network Traffic Analysis & Incident Response (Wazuh & PCAP)

Mon, 20 Apr 2026 00:00:00 +0100

Objective: To perform a technical post-mortem analysis of a network intrusion attempt using centralized log management and deep packet inspection.

Hybrid SIEM Architecture for SEO & Security Intelligence

Wed, 15 Apr 2026 10:00:00 +0100

Objective: To design and implement a unified SIEM workflow that integrates Splunk and Microsoft Sentinel to detect SEO-specific threats and automated bot attacks.

Network Traffic Baselining and Anomaly Detection

Sat, 15 Nov 2025 10:00:00 +0100

Objective: To establish a behavioral baseline for legitimate network traffic and use protocol analysis to isolate potential security threats.

Centralized Network Security via Router-Level Filtering

Mon, 10 Nov 2025 10:00:00 +0100

Objective: To implement non-device-specific security controls by enforcing domain blocking at the network gateway.

Automated Domain Blocking via Batch Scripting

Wed, 05 Nov 2025 10:00:00 +0100

Objective: To develop a reusable and scalable automation tool for neutralizing network threats at the system level.

Network Traffic Analysis & Automated Threat Mitigation

Tue, 15 Jul 2025 10:00:00 +0100

Objective: To identify suspicious network traffic using protocol analysis and implement multi-layered blocking mechanisms to secure a local environment.

Defensive Lab Environment & Network Configuration

Thu, 10 Jul 2025 10:00:00 +0100

Objective: To design and deploy a secure, isolated virtualization environment for controlled penetration testing and vulnerability analysis.

Network Security Fundamentals and Threat Assessment

Tue, 01 Jul 2025 10:00:00 +0100

Objective: To conduct a comprehensive study of network threat vectors and security controls to establish a foundational defense strategy for organizational environments.

Database Encryption & Sensitive Data Protection (MongoDB)

Sun, 19 Apr 2026 10:00:00 +0100

Objective: To implement Client-Side Field-Level Encryption (CSFLE) in a NoSQL environment to ensure that sensitive user data remains encrypted even if the database is compromised.

NoSQL Injection & Database Poisoning (Vouched Application)

Sat, 18 Apr 2026 10:00:00 +0100

Objective: To identify and exploit NoSQL injection vulnerabilities within the “Vouched” application to bypass authentication and extract sensitive user data.

Secure Session Architecture & Defensive Flag Implementation

Fri, 10 Apr 2026 10:00:00 +0100

Objective: To implement a “Secure-by-Design” framework for web applications to neutralize cookie-based attack vectors.

Session Hijacking via Automated Cookie Exfiltration

Sun, 05 Apr 2026 10:00:00 +0100

Objective: To demonstrate the ease of unauthorized cookie acquisition and subsequent account compromise using browser-based exfiltration tools.

Insecure Direct Object Reference (IDOR) & Path Traversal Discovery

Mon, 15 Dec 2025 10:00:00 +0100

Objective: To identify and verify directory traversal vulnerabilities that allow unauthorized access to sensitive system files.

Vulnerability Analysis and Remediation Planning

Wed, 10 Dec 2025 10:00:00 +0100

Objective: To systematically document discovered web vulnerabilities and provide actionable, code-level remediation strategies for development teams.

Automated Web Application Vulnerability Discovery

Fri, 05 Dec 2025 10:00:00 +0100

Objective: To utilize automated scanning tools to perform comprehensive reconnaissance and identify high-risk web vulnerabilities within an authenticated session.

Database Breach & Administrative Data Exfiltration

Wed, 15 Oct 2025 10:00:00 +0100

Objective: To leverage a compromised web shell to gain unauthorized access to the backend MySQL database and exfiltrate the full user credential table.

Cross-Site Request Forgery (CSRF) via Forged Reviews

Wed, 20 Aug 2025 10:00:00 +0100

Objective: To exploit missing request verification to perform unauthorized actions on behalf of a logged-in user.

DOM-Based Cross-Site Scripting (XSS) Analysis

Fri, 15 Aug 2025 10:00:00 +0100

Objective: To identify and exploit an unsafe JavaScript “sink” to execute arbitrary code in the victim’s browser context.

Exploiting & Mitigating String-Based SQL Injection

Sun, 10 Aug 2025 10:00:00 +0100

Objective: To demonstrate how unsanitized user input allows attackers to bypass authentication and exfiltrate sensitive database records.

Blockchain Forensics: Private Key Retrieval & Transaction Hijacking

Fri, 20 Mar 2026 10:00:00 +0100

Objective: To demonstrate the technical impact of private key exposure by automating the retrieval of all associated wallet addresses and triggering unauthorized balance checks and transactions.

Blockchain Forensics & Incident Post-Mortem (Bitfinex Case Study)

Sun, 15 Mar 2026 10:00:00 +0100

Objective: To analyze high-scale cryptocurrency heists and identify the critical security failures in private key management that lead to multi-billion dollar losses.

Mandatory Access Control (MAC) using SELinux

Thu, 15 Jan 2026 10:00:00 +0100

Objective: To enforce strict security policies at the kernel level, preventing unauthorized resource access by compromised services.

Data Integrity Verification via Cryptographic Hashing

Sat, 10 Jan 2026 10:00:00 +0100

Objective: To utilize one-way hashing algorithms to verify data authenticity and secure credential storage.

Cryptographic Infrastructure & Secure Communication

Mon, 05 Jan 2026 10:00:00 +0100

Objective: To implement and manage cryptographic systems that ensure end-to-end data confidentiality and authenticated communication.

Offline Cryptanalysis & Password Recovery

Thu, 25 Sep 2025 10:00:00 +0100

Objective: To utilize high-performance cracking tools to perform a dictionary attack against stolen MD5 hashes, successfully recovering plaintext credentials.