https://zer0arc4.github.io/tags/vulnyx/Recent content in Vulnyx on zer0arc4Hugoen-usFri, 03 Jul 2026 12:15:17 +0530https://zer0arc4.github.io/writeups/vulnyx/bank-writeup-vulnyx/Sat, 30 May 2026 00:00:00 +0000https://zer0arc4.github.io/writeups/vulnyx/bank-writeup-vulnyx/Exploited anonymous SMB access, leaked JWT credentials, bypassed file upload restrictions for RCE, recovered KeePass credentials, and abused Docker group membership to gain root.https://zer0arc4.github.io/writeups/vulnyx/doctor-writeup-vulnyx/Fri, 29 May 2026 00:00:00 +0000https://zer0arc4.github.io/writeups/vulnyx/doctor-writeup-vulnyx/Exploited LFI to retrieve an encrypted SSH key, cracked its passphrase, gained SSH access, and escalated privileges via a writable /etc/passwd file.https://zer0arc4.github.io/writeups/vulnyx/eternal-writeup-vulnyx/Thu, 28 May 2026 00:00:00 +0000https://zer0arc4.github.io/writeups/vulnyx/eternal-writeup-vulnyx/Identified a vulnerable Windows 7 host, confirmed MS17-010, exploited EternalBlue using Metasploit, and obtained NT AUTHORITY\SYSTEM privileges.https://zer0arc4.github.io/writeups/vulnyx/fing-writeup-vulnyx/Mon, 25 May 2026 00:00:00 +0000https://zer0arc4.github.io/writeups/vulnyx/fing-writeup-vulnyx/Enumerated users through the Finger service, obtained SSH access with weak credentials, and escalated privileges via a vulnerable doas rule.https://zer0arc4.github.io/writeups/vulnyx/lower7-writeup-vulnyx/Sat, 16 May 2026 00:00:00 +0000https://zer0arc4.github.io/writeups/vulnyx/lower7-writeup-vulnyx/Recovered FTP credentials from a leaked username, uploaded a Node.js reverse shell, obtained access as a low-privileged user, and escalated privileges by cracking the root password hash.https://zer0arc4.github.io/writeups/vulnyx/lower6-writeup-vulnyx/Fri, 15 May 2026 00:00:00 +0000https://zer0arc4.github.io/writeups/vulnyx/lower6-writeup-vulnyx/Enumerated a Redis instance, recovered stored credentials, gained SSH access, and abused a misconfigured gdb capability to obtain root privileges.https://zer0arc4.github.io/writeups/vulnyx/lower5-writeup-vulnyx/Thu, 14 May 2026 00:00:00 +0000https://zer0arc4.github.io/writeups/vulnyx/lower5-writeup-vulnyx/Exploited an LFI vulnerability to poison Apache logs, gained a reverse shell, abused sudo permissions, cracked a GPG passphrase, and recovered root credentials.https://zer0arc4.github.io/writeups/vulnyx/lower3-writeup-vulnyx/Wed, 13 May 2026 00:00:00 +0000https://zer0arc4.github.io/writeups/vulnyx/lower3-writeup-vulnyx/Mounted an exposed NFS share, uploaded a PHP reverse shell, gained initial access, and escalated privileges through a writable web root and SUID Bash.https://zer0arc4.github.io/writeups/vulnyx/lower4-writeup-vulnyx/Tue, 12 May 2026 00:00:00 +0000https://zer0arc4.github.io/writeups/vulnyx/lower4-writeup-vulnyx/Enumerated a valid user using the Ident protocol, brute-forced SSH credentials, and abused sudo access to multitail to obtain root privileges.https://zer0arc4.github.io/writeups/vulnyx/lower2-writeup-vulnyx/Sun, 10 May 2026 00:00:00 +0000https://zer0arc4.github.io/writeups/vulnyx/lower2-writeup-vulnyx/Enumerated services, identified a username from an SSH banner, brute-forced Telnet credentials, and gained root by modifying a writable /etc/shadow file.https://zer0arc4.github.io/writeups/vulnyx/lower-writeup-vulnyx/Sat, 09 May 2026 00:00:00 +0000https://zer0arc4.github.io/writeups/vulnyx/lower-writeup-vulnyx/Discovered a hidden virtual host, generated custom passwords using CeWL, obtained SSH access through weak credentials, and escalated privileges by modifying a writable /etc/group file.