TryHackMe

TryHackMe room writeups and walkthroughs.

Compromised LooseEnds through Vvveb CMS 1.0.5 by decoding exposed administrator credentials, exploiting CVE-2025-8518 …

Compromised the Overpass machine by bypassing the administrator authentication through an improperly validated …

Compromised the Pickle Rick machine by discovering a username in the website source code, recovering the password from …

Compromised the RootMe machine by discovering the hidden /panel/ directory, bypassing the PHP upload restriction with a …

Compromised the Billing machine by exploiting MagnusBilling through CVE-2023-30258 to obtain an unauthenticated remote …

Compromised the Startup machine by abusing an anonymous writable FTP share to upload a PHP web shell, recovered SSH …

Exploited the Ghostcat vulnerability to read Tomcat configuration files, recovered SSH credentials, cracked a GPG …

Enumerated web directories, extracted Borg archives, recovered credentials, and exploited sudo permissions for root …

Discovered hidden web directories, recovered FTP credentials, extracted SSH credentials from steganographic content, and …