https://zer0arc4.github.io/tags/upload-bypass/Recent content in Upload-Bypass on zer0arc4Hugoen-usTue, 29 Sep 2026 22:18:04 +0530https://zer0arc4.github.io/writeups/tryhackme/rootme-tryhackme-writeup/Tue, 29 Sep 2026 22:09:19 +0530https://zer0arc4.github.io/writeups/tryhackme/rootme-tryhackme-writeup/Compromised the RootMe machine by discovering the hidden /panel/ directory, bypassing the PHP upload restriction with a .phtml extension to obtain a www-data reverse shell, and escalating to effective root privileges through the SUID-enabled Python interpreter.https://zer0arc4.github.io/writeups/vulnyx/thedoor-vulnyx-writeup/Fri, 25 Sep 2026 02:15:59 +0530https://zer0arc4.github.io/writeups/vulnyx/thedoor-vulnyx-writeup/Compromised TheDoor by abusing anonymous FTP to obtain an information-disclosing email, discovering hidden numbered web directories, bypassing authentication through SQL injection, bypassing access controls using double encoding, and exploiting a double-extension upload bypass to obtain an apache shell. A root cron job processing attacker-controlled files was abused through a symlink to recover dooruser’s SSH private key, followed by root access through Python with CAP_SETUID.