lesion.io Blog

Latest — 30 Jan 2026

Conversor Walkthrough - HTB Easy Box

Enumeration We start by running an nmap scan of the machine. We find that ports 22 and 80 are open. We next perform some enumeration scans. Nothing really stands out here for me, so I run some other tools and find that Nikto flags a redirect we can add to

More issues

Expressway Walkthrough - HTB Easy box

Enumeration We first start with our nmap scan of the machine. Its here that we notice only port 22 being open on the TCP side. So I scan the UDP ports and identify port 500 IKE being open. IPSEC / IKE VPN is what is running on this port so I

You have been phished!

❗Don't worry if you're on this page your company is conducting a phishing campaign. Please read this page to learn how to stay protected from this type of an attack. You were redirected to this page because you clicked on a phishing email. Luckily this is

How to write a Password Policy

A password policy is an essential document that contains all the information regarding passwords. This is the document that will be followed by all employees to ensure that strong passwords are in use within the business. ❗Add/Remove information from this template to have it fit your use case. Getting

Creating a Business Continuity Plan

A business continuity plan is an essential document that lines out how business operations will continue after a incident or business disrupting event. This is the plan that will be followed by all high and low level individuals to ensure that business operations continue. ❗Add/Remove information from this template

Help Walkthrough - HTB Easy Box

Enumeration To start things off we run our nmap scans. Looking for open TCP and UDP ports. After identifying some open TCP ports we do a bit of enumeration. We see that we have two web servers and SSH to work with. Lets first check out the web applications. In

sudo 1.9.17 exploit - Privilege Escalation

⚠️This post and others like it are strictly for educational purposes. Intended for security researchers, penetration testers, and ethical individuals. Two different privilege escalation exploits have been found for sudo version 1.9.17. The associated CVE's for these exploits are CVE-2025-32462 CVE-2025-32463 What happened On 06/30/

Heist Walkthrough - HTB Easy box

Enumeration We start things off with our nmap scans to enumerate open ports. I first check out port 80 and find a support login page. At the bottom right of the login box it allows us to login as a guest and we can view a chat message with a

How to use PowerView.ps1 and PowerView.py

This writeup will give the reader the necessary commands and information to begin using the popular tool PowerView.ps1 and its alternative PowerView.py. These tools are utilized in this case to enumerate and attack windows active directory environments and is a crucial tool in doing so. ⚠️This post and

Creating an Access Control Policy

Access control policies are documents that state who can access what data and under what circumstance they can access that data. By delineating who has access and control over what we lower the risk of unauthorized access and potential breaches. ❗Add/Remove information from this template to have it fit

About

lesion.io Blog

A cybersecurity blog featuring in-depth exploit research, CTF writeups, and step-by-step walkthroughs. Stay updated with vulnerability analysis, PoCs, and hands-on security guides.

Topics

More issues

Subscribe to lesion.io Blog