--- title: "Yogeshwar Peela (@exploitnotes) | Hashnode" description: "I write detailed writeups on HackTheBox, PicoCTF and other CTF challenges. Passionate about web exploitation, Active Directory attacks and ethical hacking" url: "https://hashnode.com/@exploitnotes" --- @exploitnotes # Yogeshwar Peela @exploitnotes · Vishakapatnam, India · Joined May 2026 ### [HackTheBox: Odori Writeup](https://exploitnotes.hashnode.dev/hackthebox-odori-writeup?utm_source=hashnode&utm_medium=feed) Explore the HTB Odori machine walkthrough: crack BitLocker, extract Windows credentials, bypass restricted SFTP, and escalate to root. 27 min read · [exploitnotes.hashnode.dev](https://exploitnotes.hashnode.dev/hackthebox-odori-writeup?utm_source=hashnode&utm_medium=feed) [Oct 17](https://hashnode.com/posts/hackthebox-odori-writeup/6ad3588d36a3612f7946912c) ### [TryHackMe: Gallery Writeup](https://exploitnotes.hashnode.dev/tryhackme-gallery-writeup?utm_source=hashnode&utm_medium=feed) Explore the TryHackMe Gallery walkthrough covering SQL injection, PHP webshell upload, leaked credentials, sudo misconfiguration, and nano privilege. 7 min read · [exploitnotes.hashnode.dev](https://exploitnotes.hashnode.dev/tryhackme-gallery-writeup?utm_source=hashnode&utm_medium=feed) [Oct 12](https://hashnode.com/posts/tryhackme-gallery-writeup/6acce4c9df3ff43cd5520a9b) ### [TryHackMe: PlottedTMS Writeup](https://exploitnotes.hashnode.dev/tryhackme-plottedtms-writeup?utm_source=hashnode&utm_medium=feed) Explore the TryHackMe Plotted room walkthrough covering SQL injection, PHP web shell upload,cron-based privilege escalation, and doas misconfiguration 8 min read · [exploitnotes.hashnode.dev](https://exploitnotes.hashnode.dev/tryhackme-plottedtms-writeup?utm_source=hashnode&utm_medium=feed) [Oct 12](https://hashnode.com/posts/tryhackme-plottedtms-writeup/6acce2b1df63bf7d3af1baa0) ### [TryHackMe: MD2PDF Writeup](https://exploitnotes.hashnode.dev/tryhackme-md2pdf-writeup?utm_source=hashnode&utm_medium=feed) MD2PDF TryHackMe writeup covering HTML injection, SSRF, localhost access control bypass, internal admin access, and flag disclosure. 9 min read · [exploitnotes.hashnode.dev](https://exploitnotes.hashnode.dev/tryhackme-md2pdf-writeup?utm_source=hashnode&utm_medium=feed) [Oct 7](https://hashnode.com/posts/tryhackme-md2pdf-writeup/6ac62e4943b60b4fe90cb799) ### [TryHackMe - SeaSurfer writeup](https://exploitnotes.hashnode.dev/tryhackme-seasurfer-writeup?utm_source=hashnode&utm_medium=feed) Complete Sea Surfer TryHackMe writeup covering vhost enumeration, SSRF, LFI, WordPress RCE, tar wildcard injection, and SSH agent privilege escalation 15 min read · [exploitnotes.hashnode.dev](https://exploitnotes.hashnode.dev/tryhackme-seasurfer-writeup?utm_source=hashnode&utm_medium=feed) [Oct 7](https://hashnode.com/posts/tryhackme-seasurfer-writeup/6ac62062bef3e29f7cefc1f4)