PinnedNimantha DeshappriyaHow I passed eCPPTv2 in my first attempt.After months of preparation, I am pleased to say that I have passed one of the most prestigious penetration tests in the Cyber Security…5 min read·Sep 10, 2021----
Nimantha DeshappriyaSri Lanka Threat Landscape in 2023This article is about Sri Lanka’s #threat landscape in #2023. Regardless of your profession, I would encourage you to read this article…1 min read·Apr 14, 2024----
Nimantha DeshappriyaMicrosoft has decided to reverse its decision to block Office macros by default.Microsoft has rolled back the changes to block VBA macros until further notice and they haven’t provided any explanations to their…3 min read·Jul 11, 2022----
Nimantha DeshappriyaIdentifying Password Spray Attacks Using Azure SentinelPassword spraying is a technique of brute force attack. In this attack, attackers use a list of usernames and default passwords to brute…3 min read·Jul 8, 2022----
Nimantha DeshappriyaAtlassian Vulnerability CVE-2022–26134Security researchers at an organization named “Volexity” has managed to identify an unauthenticated remote code execution zero day…3 min read·Jul 6, 2022----
Nimantha DeshappriyaHunting Email Forwarding Outside Organization Using Azure SentinelIt’s a well-known technique used by advisors to exfiltrate data by forwarding email outside the compromised network.3 min read·May 6, 2022----
Nimantha DeshappriyaHack The Box — Chatterbox Writeup without MetasploitIt’s been a while since my last blog. I have been doing a few boxes but did not have a time to write a blog. I started doing medium types…4 min read·Aug 13, 2020----
Nimantha DeshappriyaHack The Box — Blocky Writeup without MetasploitBlocky is another easy machine that requires strong enumeration in resolving this box. This machine has Wordpress running, which reveals…4 min read·Jul 27, 2020----
Nimantha DeshappriyaHack The Box — Granny Writeup without MetasploitHTB Granny box is quite similar to Grandpa box, i can’t find a difference between Grandpa and Granny so i used a different approach in the…2 min read·Jul 23, 2020----
Nimantha DeshappriyaHack The Box — Grandpa Writeup without MetasploitGrandpa is another easy machine. Machine has vulnerable IIS version running. That version can easily be exploited using one of the…3 min read·Jul 22, 2020----