TryHackMe: Wgel write-up
In this article we'll tackle an easy CTF on TryHackMe. We'll enumerate a Linux box, find misplaced credentials and exploit a common Linux tool to…
Read more →Post for: #ctf (8 Posts)
HackTheBox: Inject write-up
In this post we'll take a look at the solution to the Inject challenge on HackTheBox. The solution involves abusing an LFI vulnerability and exploiting…
Read more →HackTheBox: MonitorsTwo write-up
In this article we'll crack the MonitorsTwo machine on HackTheBox. The solution involves exploiting an outdated version of Cacti (a server monitoring software), accessing a…
Read more →HackTheBox: Busqueda write-up
In this article we'll attempt to solve the Busqueda room from HackTheBox. The solution involves exploiting a Flask website to gain initial access, abusing custom…
Read more →TryHackMe: Internal write-up
In this article, we'll delve into the solution to the "Internal" TryHackMe Capture The Flag challenge. Our focus will be on the techniques used to…
Read more →TryHackMe: Opacity write-up
In this article, we're gonna dive into the solution for the "Opacity" challenge. Our goal is to bypass a file-upload filter and exploit Linux permissions…
Read more →TryHackMe: Eavesdropper write-up
In this article, we will explore the solution to the "Eavesdropper" challenge, which involves monitoring Linux processes with limited privileges and exploiting the $PATH variable…
Read more →TryHackMe: MD2PDF write-up
MD2PDF is a beginner-friendly TryHackMe room where we exploit a markdown-to-PDF converter vulnerability. Link: https://tryhackme.com/room/md2pdf Difficulty: Easy Enumeration To begin the enumeration process, I launched…
Read more →