kohicha (@kohicha) | Hashnode Toggle Sidebar Feed Pro Search Theme Sign in MoreDarkshift - a dark factory for softwareBug0 - The AI-native e2e QA regression testingThe foreword by Hashnode - official blog from the Hashnode teamPassmark - The open-source AI framework for regression testingHashnode gql skill - let your AI agent publish to your Hashnode blogHackathonsChangelogBrand@hashnode on XHashnode on LinkedInSupport - [email protected] of ConductTermsPrivacySitemap Search Hashnode Search posts, tags, users, and pages @kohicha kohicha @kohicha·Joined November 2024 he who wanders Share About Nothing here yet. Available for Nothing here yet. kohicha's blogs Yensyd Francisco | Security Skidkohicha.dev5 posts About Nothing here yet. Available for Nothing here yet. kohicha's blogs Yensyd Francisco | Security Skidkohicha.dev5 posts ArticlesComments Recently published Kkohichainkohicha.dev·3h ago · 8 min read Cloudgoat Easy: IAM Privilege Escalation by Key Rotation In this lab, we'll be doing a walkthrough on the iam_privesc_by_key_rotation cloudgoat scenario. Summary of the pathStart as manager user -> Enumerate users, roles, and policies -> Find SelfManageAcce 00 Kkohichainkohicha.dev·2d ago · 4 min read Cloudgoat Easy: Beanstalk Secrets In this lab, we'll be doing a walkthrough on an easy cloudgoat lab. Summary of the pathEnumerate Beanstalk environment on low priv user -> Get environment existing configuration -> Find hard-coded acc 10 Kkohichainkohicha.dev·Jul 24 · 4 min read HTB CJCA: Thoughts and Advice I passed the CJCA, Hack The Box's first junior-level cert. If you're new to the field, take it. If you already work in security, skip it unless you can get it free. I initially didn't plan to take thi 10 Kkohichainkohicha.dev·Jul 3, 2025 · 4 min read DOWN - HackTheBox Down is a retired easy Linux machine that involves exploiting a web service vulnerable to Server-Side Request Forgery (SSRF) due to weak input sanitization and improper URL validation. By leveraging this flaw, we retrieve the source code of the web a... 00 Kkohichainkohicha.dev·Dec 29, 2024 · 3 min read 0xL4ugh CTF - Manifesto As the year is about to end, me and my team decided to join 0xl4ugh as our final CTF event of the year. We’ll be tackling Manifesto for this writeup. Manifesto This is an easy challenge, except... it's written in Clojure. Can you find your way throu... 00