Linux

In this blog post, I will detail the process through which I successfully gained both user and root access on the HackTheBox machine, ‘Heal’.

In this blog post, I will detail the process through which I successfully gained both user and root access on the HackTheBox machine, ‘LinkVortex’.

In this blog post, I will detail the process through which I successfully gained both user and root access on the HackTheBox machine, ‘Dog’.

In this blog post, I will detail the process through which I successfully gained both user and root access on the HackTheBox machine, ‘Titanic’.

In this post, I’ll share my daily-use tmux configuration. This setup enables Vim keybindings, seamless copy-pasting, and includes a logging feature to capture terminal output.

In this box we identify session cookies that are stored in plaintext and are accessible to all users, decompile the Java code to analyze its functionality and leverage GTFOBins to escalate privileges effectively.

Exploiting a website that contains a LaTeX vulnerability. Privilege escalation is possible by a process ran in the background on a specific shell file.

Exploited gRPC service with SQL injection to get SSH access, then escalated to root using a vulnerability in the discovered pyLoad service.

Exploited vulnerable cacti application for initial access, cracked MySQL credentials for SSH, and escalated to root through Docker vulnerability CVE-2021-41091.

Exploited image parameter LFI to enumerate system, used Spring Cloud Function vulnerability for initial access, and escalated to root through a writable Ansible playbook.