Series

Nix

Article Series: Unix CTFs ¯¯̿̿¯̿̿'̿̿̿̿̿̿̿'̿̿'̿̿̿̿̿'̿̿̿)͇̿̿)̿̿̿̿ '̿̿̿̿̿̿\̵͇̿̿\=(•̪̀●́)=o/̵͇̿̿/'̿̿ ̿ ̿̿

[HackTheBox] PermX
Just another VHost / Chamilo WebShell / Sudoers / symlink SUDO -L'ed abuse Write-up. As a side-node, as Hack The Box states: It is Okay to Use Writeups. The more time you spend after getting the root flag on the box, the more you’ll learn. Machine L...
Nov 2, 202412 min read123
[HackTheBox] dynstr
Just another nsupdate RCE / SSH DynDNS Suffix Whitelist Bypass (DNS A & PTR Records) / sh symlink SUDO-L'ed Write-up. Machine link. IppSec Walkthrough. Footprinting Open ports Only SSH, DNS and HTTP services are running: kali@kali:~$ sudo nmap -sS ...
Jul 1, 20237 min read53
[Offensive Security] Proving Grounds - Tre
Just another BigTree MANTIS Credentials Leak & Pre-Auth Password Reset / Startup root pspy / root2 passwd & shadow Patch Hijack Write-up. CTF Link (VulnLab). Goal: Get the root shell i.e.(root@localhost:~#) and then obtain flag under /root). CTF Lin...
Jul 14, 20228 min read815
[Offensive Security] Proving Grounds - HAWordy
Just another wpscan WebShell RCE / cp SUID Privesc Write-up. CTF Link (VulnLab). Wordy is design for beginners to experience real life Penetration testing. This lab is completely dedicated to Web application testing and there are several vulnerabili...
Jul 14, 20225 min read375
[VulnHub] Web Machine: (N7)
Just another fping / Extension'ed Gobuster & Param Miner / Shameful VulnLab Cheat / Cookie Hash Leak / sqlmap Time-Based Blind SQLi Write-up. CTF Link. Difficulty: Medium Using VirtualBox, we first make sure the kali and the target machine both have...
Jul 11, 20227 min read3.1K
[HackTheBox] Meta
Just another VHost BF / PHP Exiftool DjVu WebShell / root Pspy CRONJOB ImageMagick Shell Injection / RSA Key Privesc / neofetch SUDO -L'ed Write-up. Machine link. IppSec Walkthrough. Footprinting Open ports Only SSH and HTTP services are running: k...
Jul 8, 202213 min read264

Command Palette