https://zer0arc4.github.io/tags/cyberchef/Recent content in Cyberchef" on zer0arc4Hugoen-usSun, 06 Sep 2026 01:17:37 +0530https://zer0arc4.github.io/writeups/vulnyx/vvveb-vulnyx-writeup/Sun, 06 Sep 2026 01:00:41 +0530https://zer0arc4.github.io/writeups/vulnyx/vvveb-vulnyx-writeup/Compromised the Vvveb machine by identifying Vvveb CMS 1.0.5, discovering the exposed /system/secret endpoint and recovering administrator credentials, abusing the authenticated Code Editor for arbitrary PHP code execution and a www-data shell, pivoting to bunny through exposed database credentials, recovering a world-readable SSH private key for zer0arc4, cracking its passphrase, and achieving root through a malicious Debian package executed via sudo-enabled dpkg.