Linux
Startup | TryHackMe Writeup
Compromised the Startup machine by abusing an anonymous writable FTP share to upload a PHP web shell, recovered SSH …
TomGhost | TryHackMe Writeup
Exploited the Ghostcat vulnerability to read Tomcat configuration files, recovered SSH credentials, cracked a GPG …
Method | Vulnyx Writeup
Exploited a vulnerable WebDAV configuration to upload a PHP web shell, gained remote code execution, and escalated …
Network | Vulnyx Writeup
Exploited a command injection vulnerability in a custom network utility to obtain a reverse shell, then escalated …
Unit | Vulnyx Writeup
Abused HTTP PUT and MOVE methods to upload and execute a PHP web shell, gained initial access as www-data, and escalated …
ShadowBlocks Writeup - Vulnyx
Enumerated an exposed iSCSI target, recovered deleted files using PhotoRec, extracted administrative credentials from a …
Cyborg | TryHackMe Writeup
Enumerated web directories, extracted Borg archives, recovered credentials, and exploited sudo permissions for root …
Lian_Yu | TryHackMe Writeup
Discovered hidden web directories, recovered FTP credentials, extracted SSH credentials from steganographic content, and …
Doctor | Vulnyx Writeup
Exploited LFI to retrieve an encrypted SSH key, cracked its passphrase, gained SSH access, and escalated privileges via …
FING | Vulnyx Writeup
Enumerated users through the Finger service, obtained SSH access with weak credentials, and escalated privileges via a …
Lower7 | Vulnyx Writeup
Recovered FTP credentials from a leaked username, uploaded a Node.js reverse shell, obtained access as a low-privileged …
Lower6 | Vulnyx Writeup
Enumerated a Redis instance, recovered stored credentials, gained SSH access, and abused a misconfigured gdb capability …
Lower5 | Vulnyx Writeup
Exploited an LFI vulnerability to poison Apache logs, gained a reverse shell, abused sudo permissions, cracked a GPG …
Lower3 | Vulnyx Writeup
Mounted an exposed NFS share, uploaded a PHP reverse shell, gained initial access, and escalated privileges through a …
Lower4 | Vulnyx Writeup
Enumerated a valid user using the Ident protocol, brute-forced SSH credentials, and abused sudo access to multitail to …
Lower2 | Vulnyx Writeup
Enumerated services, identified a username from an SSH banner, brute-forced Telnet credentials, and gained root by …
Lower | Vulnyx Writeup
Discovered a hidden virtual host, generated custom passwords using CeWL, obtained SSH access through weak credentials, …
Linux File Permissions Cheat Sheet
chmod, chown, SUID, SGID, sticky bit reference guide.