Overpass | TryHackMe Writeup
Compromised the Overpass machine by bypassing the administrator authentication through an improperly validated …
9 min read
#linux#web-enumeration
Cron
CraftFall | VulNyx Writeup
Compromised the CraftFall machine by exploiting Craft CMS 5.6.16 through CVE-2025-32432 to obtain a www-data shell, …
9 min read
#linux#craft-cms
TheDoor | VulNyx Writeup
Compromised TheDoor by abusing anonymous FTP to obtain an information-disclosing email, discovering hidden numbered web …
12 min read
#linux#ftp
Real | VulNyx Writeup
Compromised the Real machine by exploiting the UnrealIRCd 3.2.8.1 backdoor to obtain a server shell, discovering a root …
7 min read
#linux#unrealircd
Safeguard | VulNyx Writeup
Compromised the Safeguard machine by exploiting Apache Tomcat 10.1.34 through CVE-2025-24813 to obtain a tomcat shell, …
13 min read
#linux#tomcat
Alpine | VulNyx Writeup
Compromised the Alpine machine by discovering exposed SSH credentials, gaining access as developer, recovering a …
9 min read
#linux#alpine
Zerotrace | VulNyx Writeup
Compromised the ZeroTrace machine by discovering a hidden .admin directory and exploiting LFI to enumerate /proc …
19 min read
#linux#web-enumeration
Startup | TryHackMe Writeup
Compromised the Startup machine by abusing an anonymous writable FTP share to upload a PHP web shell, recovered SSH …
8 min read
#linux#ftp
Method | Vulnyx Writeup
Exploited a vulnerable WebDAV configuration to upload a PHP web shell, gained remote code execution, and escalated …
10 min read
#linux#webdav