Welcome to my /root/ 📂
You’ve found my stash of write-ups. Some are brilliant, some are messy, but all of them eventually lead to a flag. Wipe your feet on the way in.
A Pilgrim's Progress: Exploiting ImageMagick and Binwalk on Pilgrimage
Easy rated linux box from hackthebox comprising of .git directory, magick binary for file read and binwalk for privilege escalation....
Abusing Cacti: From SQLi to Root on MonitorsTwo
Easy rated linux box from hackthebox comprising of cacti, rce, and docker cve.
Beyond the Blog: Exploiting WordPress CVEs on HTB 'MetaTwo'
Write-up for ‘MetaTwo’, a box that involves exploiting WordPress CVEs with multiple vectors (SQLi, XXE, LFI) for foothold, and then leveraging passpie for root privilege escalation.
Building a Shell: From Malicious .NET Project to 'FullPowers'
Medium rated Windows box from hackthebox that involves building a malicious .NET solution project for foothold, and exploiting ‘FullPowers’ via SeImpersonate for privilege escalation.
Forging the One Shell: A PDFKit RCE on HTB 'Precious'
Easy rated box from hackthebox comprising of a Ruby pdfkit RCE for foothold and a sudo misconfiguration for privilege escalation.
From Forged Requests to Pager Escapes on HTB 'Sau'
Easy rated linux box from hackthebox comprising of an SSRF leading to RCE for foothold, and a systemctl less pager escape for privilege escalation.
Scoring with WebSockets: A Winning Goal on HTB 'Soccer'
Easy rated linux box from hackthebox comprising sqli, tiny file manager rce and doas for privilege escalation.
The Path to Root: Hijacking the Search on HTB 'Busqueda'
Easy rated linux box ‘Busqueda’ from hackthebox comprising of command injection for foothold, credentials reuse for internal subdomain and insecure code executing a relative path script as root leading to privilege escalation....
Becoming the Authority: An AD CS Exploit on HTB 'Authority'
Walkthrough of a medium-rated Windows AD box involving LDAP manipulation, cracking an Ansible vault, and escalating to Domain Admin via the AD CS ESC1 exploit.
Beyond the Interface: Escalating with a Bash Operator Flaw
Easy rated linux box from hackthebox with hidden directories leading to RCE for foothold, and bash operator evaluation for privilege escalation.