Billing | TryHackMe Writeup
Compromised the Billing machine by exploiting MagnusBilling through CVE-2023-30258 to obtain an unauthenticated remote …
5 min read
#linux#magnusbilling
Compromised the Billing machine by exploiting MagnusBilling through CVE-2023-30258 to obtain an unauthenticated remote …
Compromised the Trace machine by enumerating an exposed NFS share, discovering internal domains, bypassing a PHP …
Compromised the Blind machine by exploiting command injection in the DNSRecon GUI, obtaining a reverse shell as …
A Volt walkthrough demonstrating access-control bypass, admin credential brute-forcing, command injection, credential …
Exploited a command injection vulnerability in a custom network utility to obtain a reverse shell, then escalated …
Covers source code disclosure, directory discovery, cookie tampering, LFI, encoding, and command injection.