Writeups

MOST RECENT

Poison – HTB Writeup

Explore how to achive RCE from a Path Traversal vulnerability and to escalate privileges abusing internal services.

Amaterasu – OffSec Proving Grounds Writeup

This writeup details the compromise of a target via a Flask API directory traversal vulnerability to gain SSH access, followed by privilege escalation to root through cron job PATH hijacking.

Principal – HTB Writeup

On this machine we manipulate JWT tokens abusing of the public key leaked and we escalate privileges abusing of trust on CA signed certificates.

Reset – THM Writeup

With this writeup we see how to use the responder to steal NTLM hashes and how to use Bloodhound to search for a privilege escalation vector.

Billing – THM Writeup

We explore a billing web app, search for a exploit on the internet for the vulnerable software to obtain a reverse shell and abuse sudo for privilege escalation.

Master the Pickle Rick CTF with this guide on web enumeration and filter evasion. We cover reconnaissance using Nmap and Gobuster, techniques for bypassing command injection blacklists, and exploiting misconfigured sudo permissions to escalate privileges and root the box.