LooseEnds | TryHackMe Writeup
Compromised LooseEnds through Vvveb CMS 1.0.5 by decoding exposed administrator credentials, exploiting CVE-2025-8518 …
11 min read
#linux#vvveb
Rce
Pickle Rick | TryHackMe Writeup
Compromised the Pickle Rick machine by discovering a username in the website source code, recovering the password from …
6 min read
#linux#web-enumeration
Billing | TryHackMe Writeup
Compromised the Billing machine by exploiting MagnusBilling through CVE-2023-30258 to obtain an unauthenticated remote …
5 min read
#linux#magnusbilling
CraftFall | VulNyx Writeup
Compromised the CraftFall machine by exploiting Craft CMS 5.6.16 through CVE-2025-32432 to obtain a www-data shell, …
9 min read
#linux#craft-cms
Real | VulNyx Writeup
Compromised the Real machine by exploiting the UnrealIRCd 3.2.8.1 backdoor to obtain a server shell, discovering a root …
7 min read
#linux#unrealircd
Safeguard | VulNyx Writeup
Compromised the Safeguard machine by exploiting Apache Tomcat 10.1.34 through CVE-2025-24813 to obtain a tomcat shell, …
13 min read
#linux#tomcat
Cibercamp | VulNyx Writeup
Compromised the Cibercamp machine by exploiting WP File Manager 6.0 for unauthenticated RCE, obtaining a reverse shell …
7 min read
#linux#wordpress
Vvveb | VulNyx Writeup
Compromised the Vvveb machine by identifying Vvveb CMS 1.0.5, discovering the exposed /system/secret endpoint and …
16 min read
#linux#web-enumeration
Wellplayed | Vulnyx Writeup
Compromised the WellPlayed machine through unauthenticated WordPress WP2Shell RCE, obtained credentials from a sensitive …
11 min read
#linux#wordpress
VisionLab | Vulnyx Writeup
Compromised the VisionLab machine by abusing an insecure PyTorch model upload, executing a malicious serialized payload …
9 min read
#linux#pytorch
University | Vulnyx Writeup
Compromised the University machine by abusing password reset information disclosure, obtaining default Moodle …
7 min read
#linux#moodle
Explorer | Vulnyx Writeup
Compromised the Explorer machine by discovering eXtplorer through robots.txt, authenticating with default credentials, …
4 min read
#linux#extplorer
Startup | TryHackMe Writeup
Compromised the Startup machine by abusing an anonymous writable FTP share to upload a PHP web shell, recovered SSH …
8 min read
#linux#ftp
Method | Vulnyx Writeup
Exploited a vulnerable WebDAV configuration to upload a PHP web shell, gained remote code execution, and escalated …
10 min read
#linux#webdav
Network | Vulnyx Writeup
Exploited a command injection vulnerability in a custom network utility to obtain a reverse shell, then escalated …
6 min read
#linux#command-injection
Unit | Vulnyx Writeup
Abused HTTP PUT and MOVE methods to upload and execute a PHP web shell, gained initial access as www-data, and escalated …
6 min read
#linux#nginx
BANK | Vulnyx Writeup
Exploited anonymous SMB access, leaked JWT credentials, bypassed file upload restrictions for RCE, recovered KeePass …
8 min read
#smb#jwt
Lower3 | Vulnyx Writeup
Mounted an exposed NFS share, uploaded a PHP reverse shell, gained initial access, and escalated privileges through a …
6 min read
#linux#nfs