---
title: "K4M1_n0_73 (@0xKAM1) | Hashnode"
description: "Junior Pentester and Security Researcher/. Read the latest articles by K4M1_n0_73 on Hashnode."
url: "https://hashnode.com/@0xKAM1"
---

@0xKAM1

# K4M1\_n0\_73

@0xKAM1 · Lagos, NG · Joined March 2023

Junior Pentester and Security Researcher/

### [DC-1: Drupalgeddon2, SUID binary to root shell](https://0xk4m1.hashnode.dev/dc-1-drupalgeddon2-suid-binary-to-root-shell?utm_source=hashnode&utm_medium=feed)

Full DC-1 walkthrough: Drupal exploitation, a misleading password hint, brute forcing SSH, and a SUID find binary for root access.

15 min read · [0xk4m1.hashnode.dev](https://0xk4m1.hashnode.dev/dc-1-drupalgeddon2-suid-binary-to-root-shell?utm_source=hashnode&utm_medium=feed)

[Oct 5](https://hashnode.com/posts/dc-1-drupalgeddon2-suid-binary-to-root-shell/6ac3068a0a6b572e15616e64)

### [I\_Sniff // MiTM packet takeover using ARP spoofing with a tool I created](https://0xk4m1.hashnode.dev/i-sniff-mitm-packet-sniffer-arp-spoofing?utm_source=hashnode&utm_medium=feed)

understanding how packets move between hosts and the gateway and taking advantage of it

9 min read · [0xk4m1.hashnode.dev](https://0xk4m1.hashnode.dev/i-sniff-mitm-packet-sniffer-arp-spoofing?utm_source=hashnode&utm_medium=feed)

[Aug 14](https://hashnode.com/posts/i-sniff-mitm-packet-sniffer-arp-spoofing/6a7fa39934f1436134666ebf)

### [Gaining root access on a vulnerable Linux server using a 20 year old bug / Kioptrix 1 exploitation.](https://0xk4m1.hashnode.dev/gaining-root-access-on-a-vulnerable-linux-server-using-a-20-year-old-bug-kioptrix-1-exploitation?utm_source=hashnode&utm_medium=feed)

Using the intelligence from the recon and enumeration phase to gain root shell access. Two paths are used here, a manual exploit and Metasploit.

5 min read · [0xk4m1.hashnode.dev](https://0xk4m1.hashnode.dev/gaining-root-access-on-a-vulnerable-linux-server-using-a-20-year-old-bug-kioptrix-1-exploitation?utm_source=hashnode&utm_medium=feed)

[Jul 20](https://hashnode.com/posts/gaining-root-access-on-a-vulnerable-linux-server-using-a-20-year-old-bug-kioptrix-1-exploitation/6a5d81a502cb77622cd37e8f)

### [Scoping out a Linux server / Kioptrix 1 Recon and Enumeration.](https://0xk4m1.hashnode.dev/scoping-out-a-linux-server-kioptrix-1-recon-and-enumeration?utm_source=hashnode&utm_medium=feed)

Mapping out the attack surface before running any exploits

8 min read · [0xk4m1.hashnode.dev](https://0xk4m1.hashnode.dev/scoping-out-a-linux-server-kioptrix-1-recon-and-enumeration?utm_source=hashnode&utm_medium=feed)

[Jul 19](https://hashnode.com/posts/scoping-out-a-linux-server-kioptrix-1-recon-and-enumeration/6a5c929628cd65f9386b5f30)

### [ipsweep.sh // A host discovery recon tool on a /24 network](https://0xk4m1.hashnode.dev/https-0xk4m1-hashnode-dev-ipsweep-sh-a-host-discovery-recon-tool-on-a-24-network?utm_source=hashnode&utm_medium=feed)

A /24 IP sweep from scratch in Bash. Built without using Nmap, just ping and grep.

4 min read · [0xk4m1.hashnode.dev](https://0xk4m1.hashnode.dev/https-0xk4m1-hashnode-dev-ipsweep-sh-a-host-discovery-recon-tool-on-a-24-network?utm_source=hashnode&utm_medium=feed)

[Jul 3](https://hashnode.com/posts/https-0xk4m1-hashnode-dev-ipsweep-sh-a-host-discovery-recon-tool-on-a-24-network/6a484339d6371353630806eb)