https://zer0arc4.github.io/tags/asterisk/Recent content in Asterisk on zer0arc4Hugoen-usWed, 30 Sep 2026 22:52:57 +0530https://zer0arc4.github.io/writeups/tryhackme/billing-tryhackme-writeup/Tue, 29 Sep 2026 00:01:00 +0530https://zer0arc4.github.io/writeups/tryhackme/billing-tryhackme-writeup/Compromised the Billing machine by exploiting MagnusBilling through CVE-2023-30258 to obtain an unauthenticated remote shell as asterisk, then abusing unrestricted sudo access to fail2ban-client to create a privileged Fail2Ban action that sets the SUID bit on /bin/bash, resulting in effective root privileges.