Vvveb | VulNyx Writeup
Compromised the Vvveb machine by identifying Vvveb CMS 1.0.5, discovering the exposed /system/secret endpoint and …
16 min read
#linux#web-enumeration
Privilege-Escalation
Zerotrace | VulNyx Writeup
Compromised the ZeroTrace machine by discovering a hidden .admin directory and exploiting LFI to enumerate /proc …
19 min read
#linux#web-enumeration
Trace | Vulnyx Writeup
Compromised the Trace machine by enumerating an exposed NFS share, discovering internal domains, bypassing a PHP …
13 min read
#linux#nfs
NorthWing | Vulnyx Writeup
Compromised the NorthWing machine by exploiting Local File Inclusion with a PHP filter wrapper, recovering and cracking …
10 min read
#linux#lfi
Blind | Vulnyx Writeup
Compromised the Blind machine by exploiting command injection in the DNSRecon GUI, obtaining a reverse shell as …
5 min read
#linux#command-injection
Wellplayed | Vulnyx Writeup
Compromised the WellPlayed machine through unauthenticated WordPress WP2Shell RCE, obtained credentials from a sensitive …
11 min read
#linux#wordpress
VisionLab | Vulnyx Writeup
Compromised the VisionLab machine by abusing an insecure PyTorch model upload, executing a malicious serialized payload …
9 min read
#linux#pytorch
University | Vulnyx Writeup
Compromised the University machine by abusing password reset information disclosure, obtaining default Moodle …
7 min read
#linux#moodle
Explorer | Vulnyx Writeup
Compromised the Explorer machine by discovering eXtplorer through robots.txt, authenticating with default credentials, …
4 min read
#linux#extplorer
Volt | Vulnyx Writeup
A Volt walkthrough demonstrating access-control bypass, admin credential brute-forcing, command injection, credential …
7 min read
#linux#nmap
Open | Vulnyx Writeup
Compromised the Open machine by abusing default OpenPLC credentials, recovering a valid ttyd username, brute-forcing the …
5 min read
#linux#openplc
Care | Vulnyx Writeup
Compromised the Care machine by exploiting a Local File Inclusion vulnerability to poison Squid proxy logs and achieve …
6 min read
#linux#lfi
Lookup | Vulnyx Writeup
Compromised the Lookup machine by abusing an unrestricted DNS Zone Transfer to enumerate employee accounts, reused the …
6 min read
#linux#dns
Startup | TryHackMe Writeup
Compromised the Startup machine by abusing an anonymous writable FTP share to upload a PHP web shell, recovered SSH …
8 min read
#linux#ftp
TomGhost | TryHackMe Writeup
Exploited the Ghostcat vulnerability to read Tomcat configuration files, recovered SSH credentials, cracked a GPG …
6 min read
#linux#ghostcat
Method | Vulnyx Writeup
Exploited a vulnerable WebDAV configuration to upload a PHP web shell, gained remote code execution, and escalated …
10 min read
#linux#webdav
Cyborg | TryHackMe Writeup
Enumerated web directories, extracted Borg archives, recovered credentials, and exploited sudo permissions for root …
1 min read
#linux#borg
Lian_Yu | TryHackMe Writeup
Discovered hidden web directories, recovered FTP credentials, extracted SSH credentials from steganographic content, and …
2 min read
#linux#ftp
BANK | Vulnyx Writeup
Exploited anonymous SMB access, leaked JWT credentials, bypassed file upload restrictions for RCE, recovered KeePass …
8 min read
#smb#jwt
Doctor | Vulnyx Writeup
Exploited LFI to retrieve an encrypted SSH key, cracked its passphrase, gained SSH access, and escalated privileges via …
3 min read
#linux#lfi
FING | Vulnyx Writeup
Enumerated users through the Finger service, obtained SSH access with weak credentials, and escalated privileges via a …
6 min read
#linux#finger
Lower7 | Vulnyx Writeup
Recovered FTP credentials from a leaked username, uploaded a Node.js reverse shell, obtained access as a low-privileged …
5 min read
#linux#ftp
Lower6 | Vulnyx Writeup
Enumerated a Redis instance, recovered stored credentials, gained SSH access, and abused a misconfigured gdb capability …
6 min read
#linux#redis
Lower5 | Vulnyx Writeup
Exploited an LFI vulnerability to poison Apache logs, gained a reverse shell, abused sudo permissions, cracked a GPG …
7 min read
#linux#lfi
Lower3 | Vulnyx Writeup
Mounted an exposed NFS share, uploaded a PHP reverse shell, gained initial access, and escalated privileges through a …
6 min read
#linux#nfs
Lower4 | Vulnyx Writeup
Enumerated a valid user using the Ident protocol, brute-forced SSH credentials, and abused sudo access to multitail to …
5 min read
#linux#ident
Lower2 | Vulnyx Writeup
Enumerated services, identified a username from an SSH banner, brute-forced Telnet credentials, and gained root by …
5 min read
#linux#telnet
Lower | Vulnyx Writeup
Discovered a hidden virtual host, generated custom passwords using CeWL, obtained SSH access through weak credentials, …
5 min read
#linux#vhost
Linux File Permissions Cheat Sheet
chmod, chown, SUID, SGID, sticky bit reference guide.
1 min read
#linux#permissions