https://zer0arc4.github.io/tags/ssh2john/Recent content in Ssh2john on zer0arc4Hugoen-usSun, 04 Oct 2026 17:28:19 +0530https://zer0arc4.github.io/writeups/tryhackme/overpass-tryhackme-writeup/Sun, 04 Oct 2026 17:06:23 +0530https://zer0arc4.github.io/writeups/tryhackme/overpass-tryhackme-writeup/Compromised the Overpass machine by bypassing the administrator authentication through an improperly validated SessionToken cookie, recovering and cracking James’s SSH private key, obtaining SSH access as james, and exploiting a root cron job combined with a world-writable /etc/hosts file to redirect overpass.thm and execute an attacker-controlled script as root.