lesion.io Blog

Latest — 13 Nov 2025

You have been phished!

❗Don't worry if you're on this page your company is conducting a phishing campaign. Please read this page to learn how to stay protected from this type of an attack. You were redirected to this page because you clicked on a phishing email. Luckily this is

More issues

How to write a Password Policy

A password policy is an essential document that contains all the information regarding passwords. This is the document that will be followed by all employees to ensure that strong passwords are in use within the business. ❗Add/Remove information from this template to have it fit your use case. Getting

Creating a Business Continuity Plan

A business continuity plan is an essential document that lines out how business operations will continue after a incident or business disrupting event. This is the plan that will be followed by all high and low level individuals to ensure that business operations continue. ❗Add/Remove information from this template

Help Walkthrough - HTB Easy Box

Enumeration To start things off we run our nmap scans. Looking for open TCP and UDP ports. After identifying some open TCP ports we do a bit of enumeration. We see that we have two web servers and SSH to work with. Lets first check out the web applications. In

sudo 1.9.17 exploit - Privilege Escalation

⚠️This post and others like it are strictly for educational purposes. Intended for security researchers, penetration testers, and ethical individuals. Two different privilege escalation exploits have been found for sudo version 1.9.17. The associated CVE's for these exploits are CVE-2025-32462 CVE-2025-32463 What happened On 06/30/

Heist Walkthrough - HTB Easy box

Enumeration We start things off with our nmap scans to enumerate open ports. I first check out port 80 and find a support login page. At the bottom right of the login box it allows us to login as a guest and we can view a chat message with a

How to use PowerView.ps1 and PowerView.py

This writeup will give the reader the necessary commands and information to begin using the popular tool PowerView.ps1 and its alternative PowerView.py. These tools are utilized in this case to enumerate and attack windows active directory environments and is a crucial tool in doing so. ⚠️This post and

Creating an Access Control Policy

Access control policies are documents that state who can access what data and under what circumstance they can access that data. By delineating who has access and control over what we lower the risk of unauthorized access and potential breaches. ❗Add/Remove information from this template to have it fit

Dog Walkthrough - HTB Easy box

Enumeration To start things off we start with our usual nmap scan. The first thing that comes to mind is that this is a web exploitation box. Second we see an exposed .git repository and some entries in robots.txt that we can check out. When visiting the site we

How to use Ligolo-ng to pivot and tunnel in 2025

⚠️This post and others like it are strictly for educational purposes. Intended for security researchers, penetration testers, and ethical individuals. Ligolo-ng is a advanced yet simple pivoting and tunneling tool created by "nicocha30". It is used as a tool to pivot and tunnel computer traffic. It is especially

About

lesion.io Blog

A cybersecurity blog featuring in-depth exploit research, CTF writeups, and step-by-step walkthroughs. Stay updated with vulnerability analysis, PoCs, and hands-on security guides.

Topics

More issues

Subscribe to lesion.io Blog