RootMe | TryHackMe Writeup
Compromised the RootMe machine by discovering the hidden /panel/ directory, bypassing the PHP upload restriction with a …
6 min read
#linux#web-enumeration
Suid
Billing | TryHackMe Writeup
Compromised the Billing machine by exploiting MagnusBilling through CVE-2023-30258 to obtain an unauthenticated remote …
5 min read
#linux#magnusbilling
Trace | Vulnyx Writeup
Compromised the Trace machine by enumerating an exposed NFS share, discovering internal domains, bypassing a PHP …
13 min read
#linux#nfs
NorthWing | Vulnyx Writeup
Compromised the NorthWing machine by exploiting Local File Inclusion with a PHP filter wrapper, recovering and cracking …
10 min read
#linux#lfi
Blind | Vulnyx Writeup
Compromised the Blind machine by exploiting command injection in the DNSRecon GUI, obtaining a reverse shell as …
5 min read
#linux#command-injection
Wellplayed | Vulnyx Writeup
Compromised the WellPlayed machine through unauthenticated WordPress WP2Shell RCE, obtained credentials from a sensitive …
11 min read
#linux#wordpress