https://zer0arc4.github.io/tags/ssh-private-key/Recent content in Ssh-Private-Key on zer0arc4Hugoen-usThu, 08 Oct 2026 22:35:36 +0530https://zer0arc4.github.io/writeups/tryhackme/looseends-tryhackme-writeup/Tue, 06 Oct 2026 22:50:20 +0530https://zer0arc4.github.io/writeups/tryhackme/looseends-tryhackme-writeup/Compromised LooseEnds through Vvveb CMS 1.0.5 by decoding exposed administrator credentials, exploiting CVE-2025-8518 for PHP code execution, recovering database credentials for bunny, abusing the monkeys group to access zer0arc4’s SSH key, and exploiting sudo dpkg to obtain root.https://zer0arc4.github.io/writeups/tryhackme/overpass-tryhackme-writeup/Sun, 04 Oct 2026 17:06:23 +0530https://zer0arc4.github.io/writeups/tryhackme/overpass-tryhackme-writeup/Compromised the Overpass machine by bypassing the administrator authentication through an improperly validated SessionToken cookie, recovering and cracking James’s SSH private key, obtaining SSH access as james, and exploiting a root cron job combined with a world-writable /etc/hosts file to redirect overpass.thm and execute an attacker-controlled script as root.https://zer0arc4.github.io/writeups/vulnyx/thedoor-vulnyx-writeup/Fri, 25 Sep 2026 02:15:59 +0530https://zer0arc4.github.io/writeups/vulnyx/thedoor-vulnyx-writeup/Compromised TheDoor by abusing anonymous FTP to obtain an information-disclosing email, discovering hidden numbered web directories, bypassing authentication through SQL injection, bypassing access controls using double encoding, and exploiting a double-extension upload bypass to obtain an apache shell. A root cron job processing attacker-controlled files was abused through a symlink to recover dooruser’s SSH private key, followed by root access through Python with CAP_SETUID.https://zer0arc4.github.io/writeups/vulnyx/alpine-vulnyx-writeup/Fri, 18 Sep 2026 17:56:40 +0530https://zer0arc4.github.io/writeups/vulnyx/alpine-vulnyx-writeup/Compromised the Alpine machine by discovering exposed SSH credentials, gaining access as developer, recovering a sysadmin SSH private key from Git history, identifying a root cron job with pspy, and modifying its writable script to obtain a root shell.