YPYogeshwar Peelainexploitnotes.hashnode.dev·Jul 24 · 18 min readTryHackMe : Enterprise WriteupSummary Enterprise is an Active Directory box that starts as a classic external AD footprint (DNS, Kerberos, LDAP, SMB, RDP, WinRM) plus two extra web ports: an IIS site on 80 and a Bitbucket-branded 00
YPYogeshwar Peelainexploitnotes.hashnode.dev·Jul 22 · 10 min readTryHackMe : Fool's Mate RevengeSummary This is the sequel to the original Endgame Trainer box. The developer clearly read that writeup - the client-side "don't let the player actually win" gate is gone entirely, and the win conditi00
YPYogeshwar Peelainexploitnotes.hashnode.dev·Jul 22 · 8 min readTryHackMe : FoolMate WriteupSummary Endgame Trainer is a small web app that presents a "mate-in-one" chess puzzle. The board is legit (built on the chess.js library), but the app has a gimmick: if you actually play the winning m00
YPYogeshwar Peelainexploitnotes.hashnode.dev·Jul 19 · 15 min readHackTheBox : Pterodactyl WriteupSummary Pterodactyl is a Linux box built around an unauthenticated RCE in the Pterodactyl game-server management panel. A static "MonitorLand" landing page on port 80 gives no functionality of its own00
YPYogeshwar Peelainexploitnotes.hashnode.dev·Jul 19 · 16 min readHackTheBox : Garfield WriteupSummary Garfield is a Windows Active Directory box centered on an attack path that's invisible to standard BloodHound collection: SYSVOL file-level write access that isn't reflected in AD object ACLs.00
