LooseEnds | TryHackMe Writeup
Compromised LooseEnds through Vvveb CMS 1.0.5 by decoding exposed administrator credentials, exploiting CVE-2025-8518 …
11 min read
#linux#vvveb
Ssh
Overpass | TryHackMe Writeup
Compromised the Overpass machine by bypassing the administrator authentication through an improperly validated …
9 min read
#linux#web-enumeration
CraftFall | VulNyx Writeup
Compromised the CraftFall machine by exploiting Craft CMS 5.6.16 through CVE-2025-32432 to obtain a www-data shell, …
9 min read
#linux#craft-cms
TheDoor | VulNyx Writeup
Compromised TheDoor by abusing anonymous FTP to obtain an information-disclosing email, discovering hidden numbered web …
12 min read
#linux#ftp
Safeguard | VulNyx Writeup
Compromised the Safeguard machine by exploiting Apache Tomcat 10.1.34 through CVE-2025-24813 to obtain a tomcat shell, …
13 min read
#linux#tomcat
Alpine | VulNyx Writeup
Compromised the Alpine machine by discovering exposed SSH credentials, gaining access as developer, recovering a …
9 min read
#linux#alpine
Cibercamp | VulNyx Writeup
Compromised the Cibercamp machine by exploiting WP File Manager 6.0 for unauthenticated RCE, obtaining a reverse shell …
7 min read
#linux#wordpress
Vvveb | VulNyx Writeup
Compromised the Vvveb machine by identifying Vvveb CMS 1.0.5, discovering the exposed /system/secret endpoint and …
16 min read
#linux#web-enumeration
Zerotrace | VulNyx Writeup
Compromised the ZeroTrace machine by discovering a hidden .admin directory and exploiting LFI to enumerate /proc …
19 min read
#linux#web-enumeration
Trace | Vulnyx Writeup
Compromised the Trace machine by enumerating an exposed NFS share, discovering internal domains, bypassing a PHP …
13 min read
#linux#nfs
NorthWing | Vulnyx Writeup
Compromised the NorthWing machine by exploiting Local File Inclusion with a PHP filter wrapper, recovering and cracking …
10 min read
#linux#lfi
Wellplayed | Vulnyx Writeup
Compromised the WellPlayed machine through unauthenticated WordPress WP2Shell RCE, obtained credentials from a sensitive …
11 min read
#linux#wordpress
VisionLab | Vulnyx Writeup
Compromised the VisionLab machine by abusing an insecure PyTorch model upload, executing a malicious serialized payload …
9 min read
#linux#pytorch
University | Vulnyx Writeup
Compromised the University machine by abusing password reset information disclosure, obtaining default Moodle …
7 min read
#linux#moodle
Volt | Vulnyx Writeup
A Volt walkthrough demonstrating access-control bypass, admin credential brute-forcing, command injection, credential …
7 min read
#linux#nmap
Lookup | Vulnyx Writeup
Compromised the Lookup machine by abusing an unrestricted DNS Zone Transfer to enumerate employee accounts, reused the …
6 min read
#linux#dns
ShadowBlocks Writeup - Vulnyx
Enumerated an exposed iSCSI target, recovered deleted files using PhotoRec, extracted administrative credentials from a …
8 min read
#linux#iscsi
Doctor | Vulnyx Writeup
Exploited LFI to retrieve an encrypted SSH key, cracked its passphrase, gained SSH access, and escalated privileges via …
3 min read
#linux#lfi
FING | Vulnyx Writeup
Enumerated users through the Finger service, obtained SSH access with weak credentials, and escalated privileges via a …
6 min read
#linux#finger
Lower6 | Vulnyx Writeup
Enumerated a Redis instance, recovered stored credentials, gained SSH access, and abused a misconfigured gdb capability …
6 min read
#linux#redis
Lower4 | Vulnyx Writeup
Enumerated a valid user using the Ident protocol, brute-forced SSH credentials, and abused sudo access to multitail to …
5 min read
#linux#ident