Writeups

With this writeup we see how to use the responder to steal NTLM hashes and how to use Bloodhound to search for a privilege escalation vector.

We explore a billing web app, search for a exploit on the internet for the vulnerable software to obtain a reverse shell and abuse sudo for privilege escalation.

Master the Pickle Rick CTF with this guide on web enumeration and filter evasion. We cover reconnaissance using Nmap and Gobuster, techniques for bypassing command injection blacklists, and exploiting misconfigured sudo permissions to escalate privileges and root the box.

We explore open web services for initial access, leverage blind SQL injection to extract credentials for lateral movement, and exploit PYTHONPATH environment manipulation via sudo-enabled scripts for privilege escalation.