https://zer0arc4.github.io/tags/command-execution/Recent content in Command-Execution on zer0arc4Hugoen-usWed, 30 Sep 2026 22:52:57 +0530https://zer0arc4.github.io/writeups/tryhackme/pickle-rick-tryhackme-writeup/Wed, 30 Sep 2026 22:01:57 +0530https://zer0arc4.github.io/writeups/tryhackme/pickle-rick-tryhackme-writeup/Compromised the Pickle Rick machine by discovering a username in the website source code, recovering the password from robots.txt, accessing a command execution panel, obtaining a www-data reverse shell, discovering the potion ingredients, and escalating to root through unrestricted sudo privileges.https://zer0arc4.github.io/writeups/vulnyx/kyubi-vulnyx-writeup/Fri, 25 Sep 2026 17:50:21 +0530https://zer0arc4.github.io/writeups/vulnyx/kyubi-vulnyx-writeup/Compromised the Kyubi machine by exploiting Grafana CVE-2021-43798 to read local files and recover a Redis password, extracting Gitea administrator credentials from Redis, abusing a Gitea repository Git Hook to obtain a gitea shell, and escalating to root through the DirtyClone kernel vulnerability CVE-2026-43503.