vulnyx
medium
Linux
Vvveb | VulNyx Writeup
Compromised the Vvveb machine by identifying Vvveb CMS 1.0.5, discovering the exposed /system/secret endpoint and …
16 min read
#linux#web-enumeration#vvveb
Vulnyx
Vulnyx machine writeups and walkthroughs.
All
Vulnyx (28)
TryHackMe (4)
Hack The Box (1)
OverTheWire (1)
OWASP Juice Shop (1)
HackMyVM (0)
Meta-CTF (0)
vulnyx
medium
Linux
Zerotrace | VulNyx Writeup
Compromised the ZeroTrace machine by discovering a hidden .admin directory and exploiting LFI to enumerate /proc …
19 min read
#linux#web-enumeration#ffuf
vulnyx
hard
Linux
Trace | Vulnyx Writeup
Compromised the Trace machine by enumerating an exposed NFS share, discovering internal domains, bypassing a PHP …
13 min read
#linux#nfs#nfs-enumeration
vulnyx
easy
Linux
NorthWing | Vulnyx Writeup
Compromised the NorthWing machine by exploiting Local File Inclusion with a PHP filter wrapper, recovering and cracking …
10 min read
#linux#lfi#php-filter
vulnyx
easy
Linux
Blind | Vulnyx Writeup
Compromised the Blind machine by exploiting command injection in the DNSRecon GUI, obtaining a reverse shell as …
5 min read
#linux#command-injection#dnsrecon
vulnyx
medium
Linux
Wellplayed | Vulnyx Writeup
Compromised the WellPlayed machine through unauthenticated WordPress WP2Shell RCE, obtained credentials from a sensitive …
11 min read
#linux#wordpress#wp2shell
vulnyx
medium
Linux
VisionLab | Vulnyx Writeup
Compromised the VisionLab machine by abusing an insecure PyTorch model upload, executing a malicious serialized payload …
9 min read
#linux#pytorch#torch-load
vulnyx
medium
Linux
University | Vulnyx Writeup
Compromised the University machine by abusing password reset information disclosure, obtaining default Moodle …
7 min read
#linux#moodle#cve-2024-43425
vulnyx
easy
Linux
Explorer | Vulnyx Writeup
Compromised the Explorer machine by discovering eXtplorer through robots.txt, authenticating with default credentials, …
4 min read
#linux#extplorer#default-credentials
vulnyx
medium
Linux
Volt | Vulnyx Writeup
A Volt walkthrough demonstrating access-control bypass, admin credential brute-forcing, command injection, credential …
7 min read
#linux#nmap#gobuster
vulnyx
easy
Linux
Open | Vulnyx Writeup
Compromised the Open machine by abusing default OpenPLC credentials, recovering a valid ttyd username, brute-forcing the …
5 min read
#linux#openplc#ttyd
vulnyx
easy
Linux
Care | Vulnyx Writeup
Compromised the Care machine by exploiting a Local File Inclusion vulnerability to poison Squid proxy logs and achieve …
6 min read
#linux#lfi#squid
vulnyx
easy
Linux
Lookup | Vulnyx Writeup
Compromised the Lookup machine by abusing an unrestricted DNS Zone Transfer to enumerate employee accounts, reused the …
6 min read
#linux#dns#axfr
vulnyx
easy
Linux
Method | Vulnyx Writeup
Exploited a vulnerable WebDAV configuration to upload a PHP web shell, gained remote code execution, and escalated …
10 min read
#linux#webdav#file-upload
vulnyx
low
Linux
Network | Vulnyx Writeup
Exploited a command injection vulnerability in a custom network utility to obtain a reverse shell, then escalated …
6 min read
#linux#command-injection#rce
vulnyx
easy
Linux
Unit | Vulnyx Writeup
Abused HTTP PUT and MOVE methods to upload and execute a PHP web shell, gained initial access as www-data, and escalated …
6 min read
#linux#nginx#http-methods
vulnyx
easy
Linux
ShadowBlocks Writeup - Vulnyx
Enumerated an exposed iSCSI target, recovered deleted files using PhotoRec, extracted administrative credentials from a …
8 min read
#linux#iscsi#photorec
vulnyx
easy
Linux
BANK | Vulnyx Writeup
Exploited anonymous SMB access, leaked JWT credentials, bypassed file upload restrictions for RCE, recovered KeePass …
8 min read
#smb#jwt#rce
vulnyx
low
Linux
Doctor | Vulnyx Writeup
Exploited LFI to retrieve an encrypted SSH key, cracked its passphrase, gained SSH access, and escalated privileges via …
3 min read
#linux#lfi#ssh
vulnyx
low
Windows
Eternal | Vulnyx Writeup
Identified a vulnerable Windows 7 host, confirmed MS17-010, exploited EternalBlue using Metasploit, and obtained NT …
8 min read
#windows#smb#eternalblue
vulnyx
low
Linux
FING | Vulnyx Writeup
Enumerated users through the Finger service, obtained SSH access with weak credentials, and escalated privileges via a …
6 min read
#linux#finger#ssh
vulnyx
low
Linux
Lower7 | Vulnyx Writeup
Recovered FTP credentials from a leaked username, uploaded a Node.js reverse shell, obtained access as a low-privileged …
5 min read
#linux#ftp#nodejs
vulnyx
low
Linux
Lower6 | Vulnyx Writeup
Enumerated a Redis instance, recovered stored credentials, gained SSH access, and abused a misconfigured gdb capability …
6 min read
#linux#redis#ssh
vulnyx
low
Linux
Lower5 | Vulnyx Writeup
Exploited an LFI vulnerability to poison Apache logs, gained a reverse shell, abused sudo permissions, cracked a GPG …
7 min read
#linux#lfi#apache
vulnyx
low
Linux
Lower3 | Vulnyx Writeup
Mounted an exposed NFS share, uploaded a PHP reverse shell, gained initial access, and escalated privileges through a …
6 min read
#linux#nfs#php
vulnyx
low
Linux
Lower4 | Vulnyx Writeup
Enumerated a valid user using the Ident protocol, brute-forced SSH credentials, and abused sudo access to multitail to …
5 min read
#linux#ident#ssh
vulnyx
low
Linux
Lower2 | Vulnyx Writeup
Enumerated services, identified a username from an SSH banner, brute-forced Telnet credentials, and gained root by …
5 min read
#linux#telnet#hydra
vulnyx
low
Linux
Lower | Vulnyx Writeup
Discovered a hidden virtual host, generated custom passwords using CeWL, obtained SSH access through weak credentials, …
5 min read
#linux#vhost#ffuf