https://zer0arc4.github.io/tags/remote-code-execution/Recent content in Remote-Code-Execution on zer0arc4Hugoen-usWed, 30 Sep 2026 22:52:57 +0530https://zer0arc4.github.io/writeups/tryhackme/billing-tryhackme-writeup/Tue, 29 Sep 2026 00:01:00 +0530https://zer0arc4.github.io/writeups/tryhackme/billing-tryhackme-writeup/Compromised the Billing machine by exploiting MagnusBilling through CVE-2023-30258 to obtain an unauthenticated remote shell as asterisk, then abusing unrestricted sudo access to fail2ban-client to create a privileged Fail2Ban action that sets the SUID bit on /bin/bash, resulting in effective root privileges.https://zer0arc4.github.io/writeups/vulnyx/craftfall-vulnyx-writeup/Mon, 28 Sep 2026 17:49:32 +0530https://zer0arc4.github.io/writeups/vulnyx/craftfall-vulnyx-writeup/Compromised the CraftFall machine by exploiting Craft CMS 5.6.16 through CVE-2025-32432 to obtain a www-data shell, abusing a world-writable scheduled script to move to zer0arc4, establishing stable SSH access, and exploiting sudo-enabled autoconf through the AUTOM4TE environment variable to obtain root.https://zer0arc4.github.io/writeups/vulnyx/real-vulnyx-writeup/Thu, 24 Sep 2026 18:00:06 +0530https://zer0arc4.github.io/writeups/vulnyx/real-vulnyx-writeup/Compromised the Real machine by exploiting the UnrealIRCd 3.2.8.1 backdoor to obtain a server shell, discovering a root cron job that connected to shelly.real.nyx, redirecting the hostname through a writable /etc/hosts file, and receiving a root shell.https://zer0arc4.github.io/writeups/vulnyx/cibercamp-vulnyx-writeup/Thu, 17 Sep 2026 21:53:19 +0530https://zer0arc4.github.io/writeups/vulnyx/cibercamp-vulnyx-writeup/Compromised the Cibercamp machine by exploiting WP File Manager 6.0 for unauthenticated RCE, obtaining a reverse shell as www-data, reusing WordPress credentials to access wpuser through SSH, and escalating to root through sudo-enabled Vim.