Vulnyx
Vulnyx machine writeups and walkthroughs.
Method | Vulnyx Writeup
Exploited a vulnerable WebDAV configuration to upload a PHP web shell, gained remote code execution, and escalated …
Network | Vulnyx Writeup
Exploited a command injection vulnerability in a custom network utility to obtain a reverse shell, then escalated …
Unit | Vulnyx Writeup
Abused HTTP PUT and MOVE methods to upload and execute a PHP web shell, gained initial access as www-data, and escalated …
ShadowBlocks Writeup - Vulnyx
Enumerated an exposed iSCSI target, recovered deleted files using PhotoRec, extracted administrative credentials from a …
BANK | Vulnyx Writeup
Exploited anonymous SMB access, leaked JWT credentials, bypassed file upload restrictions for RCE, recovered KeePass …
Doctor | Vulnyx Writeup
Exploited LFI to retrieve an encrypted SSH key, cracked its passphrase, gained SSH access, and escalated privileges via …
Eternal | Vulnyx Writeup
Identified a vulnerable Windows 7 host, confirmed MS17-010, exploited EternalBlue using Metasploit, and obtained NT …
FING | Vulnyx Writeup
Enumerated users through the Finger service, obtained SSH access with weak credentials, and escalated privileges via a …
Lower7 | Vulnyx Writeup
Recovered FTP credentials from a leaked username, uploaded a Node.js reverse shell, obtained access as a low-privileged …
Lower6 | Vulnyx Writeup
Enumerated a Redis instance, recovered stored credentials, gained SSH access, and abused a misconfigured gdb capability …
Lower5 | Vulnyx Writeup
Exploited an LFI vulnerability to poison Apache logs, gained a reverse shell, abused sudo permissions, cracked a GPG …
Lower3 | Vulnyx Writeup
Mounted an exposed NFS share, uploaded a PHP reverse shell, gained initial access, and escalated privileges through a …
Lower4 | Vulnyx Writeup
Enumerated a valid user using the Ident protocol, brute-forced SSH credentials, and abused sudo access to multitail to …
Lower2 | Vulnyx Writeup
Enumerated services, identified a username from an SSH banner, brute-forced Telnet credentials, and gained root by …
Lower | Vulnyx Writeup
Discovered a hidden virtual host, generated custom passwords using CeWL, obtained SSH access through weak credentials, …