Aameya0xinameya0x.hashnode.dev·May 4 · 3 min readHTB File Upload Skill Assessment Walkthrough - Bypassing Every Filter They Threw At Us So HTB gave us a file upload challenge. Filters everywhere. The dev thought they were clever. They were not. Step 1 — Recon Homepage is useless. Navigate to /contact — file upload form. The attacker'00
Aameya0xinameya0x.hashnode.dev·May 2 · 5 min readSilentium: From AI Password Reset to Root via Symlink Sorcery1. Recon — The Usual Ritual nmap -sCV 10.129.45.122 -A -T 4 Open ports: 22 (SSH) and 80 (Nginx). The web server redirects to silentium.htb, so we add it to /etc/hosts like responsible adults. Nothi00
Aameya0xinameya0x.hashnode.dev·Apr 26 · 7 min readKobold: When the AI Dev Tool Hands You a ShellReconnaissance We start where every good story begins — with nmap and absolutely no idea what we're walking into. nmap -sCV -A 10.129.40.208 -p- Results come back with four open ports: Port Serv00
