https://coreyfarley.com/ Recent content on Corey Farley Hugo en-us Mon, 20 Jul 2026 00:00:00 +0000 https://coreyfarley.com/posts/extplorer-offsec/ Mon, 20 Jul 2026 00:00:00 +0000 https://coreyfarley.com/posts/extplorer-offsec/ A Linux box built around eXtplorer, a PHP file manager. Default creds get a webshell, leaked credentials pivot to a local user, and disk group membership leads straight to root. https://coreyfarley.com/posts/remote-htb/ Mon, 06 Jul 2026 00:00:00 +0000 https://coreyfarley.com/posts/remote-htb/ An easy Windows box running Umbraco CMS. Creds leak from a world-readable NFS share, an authenticated Umbraco exploit gets a foothold, and a Print Spooler abuse gets SYSTEM. https://coreyfarley.com/projects/pentest-report/ Mon, 01 Jun 2026 00:00:00 +0000 https://coreyfarley.com/projects/pentest-report/ Mock pentest report that I had as apart of a recent technical interview. https://coreyfarley.com/projects/nxc-sweep/ Sun, 10 May 2026 00:00:00 +0000 https://coreyfarley.com/projects/nxc-sweep/ A Bash wrapper for NetExec to quickly validate compromised credentials across SMB, WinRM, RDP, MSSQL, and FTP. https://coreyfarley.com/projects/cve-2026-27897/ Wed, 11 Mar 2026 00:00:00 +0000 https://coreyfarley.com/projects/cve-2026-27897/ A technical breakdown of CVE-2026-27897, a high-severity path traversal and arbitrary file write vulnerability I discovered during a security audit of the Vociferous application. https://coreyfarley.com/posts/groundworm-htb/ Mon, 20 Oct 2025 00:00:00 +0000 https://coreyfarley.com/posts/groundworm-htb/ A walkthrough of GroundWorm, a hard-rated DFIR Sherlock on HackTheBox, tracing a simulated APT attack from initial access through ransomware deployment using Splunk and API Monitor. https://coreyfarley.com/projects/python-keylogger/ Sun, 21 Sep 2025 00:00:00 +0000 https://coreyfarley.com/projects/python-keylogger/ Building and obfuscating a covert Python keylogger, from writing the core logic to packaging it as an executable and running test deployments. https://coreyfarley.com/posts/infostealer-analysis/ Thu, 21 Aug 2025 00:00:00 +0000 https://coreyfarley.com/posts/infostealer-analysis/ An investigation into a simple infostealer, following the retired TeleStealer Lab from CyberDefenders, covering static and dynamic malware analysis. https://coreyfarley.com/posts/intro-to-malware-analysis/ Mon, 18 Aug 2025 00:00:00 +0000 https://coreyfarley.com/posts/intro-to-malware-analysis/ A high-level overview of the steps taken in the MalaCrypt lab from CyberDefenders, covering static and dynamic malware analysis. https://coreyfarley.com/posts/linux-privilege-escalation/ Tue, 20 May 2025 00:00:00 +0000 https://coreyfarley.com/posts/linux-privilege-escalation/ A walk-through of the Linux Privilege Escalation room in the Jr Penetration Tester pathway on TryHackMe, covering eight core privilege escalation techniques. https://coreyfarley.com/about/ Mon, 01 Jan 0001 00:00:00 +0000 https://coreyfarley.com/about/ https://coreyfarley.com/contact/ Mon, 01 Jan 0001 00:00:00 +0000 https://coreyfarley.com/contact/