---
title: "Hồ Quang Anh (@hoquanganh09) | Hashnode"
description: "Hồ Quang Anh (@hoquanganh09) writes on Hashnode. Read their latest articles and follow their work."
url: "https://hashnode.com/@hoquanganh09"
---

@hoquanganh09

# Hồ Quang Anh

@hoquanganh09 · Joined March 2024

### [TryHackMe — Rabbit Store (Medium) Walkthrough: Mass Assignment → SSRF → SSTI → RabbitMQ → Root](https://anhbii.hashnode.dev/tryhackme-rabbit-store-medium-walkthrough-mass-assignment-ssrf-ssti-rabbitmq-root?utm_source=hashnode&utm_medium=feed)

Room: Rabbit Store · Difficulty: Medium · Category: Web / Red Team TL;DR: A subscription mass-assignment bug unlocks an SSRF endpoint, which exposes an internal API doc revealing a Jinja2 SSTI endpoin

6 min read · [anhbii.hashnode.dev](https://anhbii.hashnode.dev/tryhackme-rabbit-store-medium-walkthrough-mass-assignment-ssrf-ssti-rabbitmq-root?utm_source=hashnode&utm_medium=feed)

[Jul 4](https://hashnode.com/posts/tryhackme-rabbit-store-medium-walkthrough-mass-assignment-ssrf-ssti-rabbitmq-root/6a48af90f3ddf6a3c6ef7236)

### [UltraTech (TryHackMe) — Command Injection to Root via the Docker Group](https://anhbii.hashnode.dev/ultratech-tryhackme-command-injection-to-root-via-the-docker-group?utm_source=hashnode&utm_medium=feed)

Room: UltraTech · Độ khó: Medium · Hướng: Red / Web + Privesc Tóm tắt: REST API Node.js ở cổng 8081 có endpoint /ping dính OS command injection. Filter chặn ; | & $ \\ ( ) < > và cả dấu cách, nhưng để

5 min read · [anhbii.hashnode.dev](https://anhbii.hashnode.dev/ultratech-tryhackme-command-injection-to-root-via-the-docker-group?utm_source=hashnode&utm_medium=feed)

[Jul 4](https://hashnode.com/posts/ultratech-tryhackme-command-injection-to-root-via-the-docker-group/6a48a0ae7112d158479dfa9b)

### [dogcat (TryHackMe) — Walkthrough: PHP LFI → RCE → sudo env → Docker escape](https://anhbii.hashnode.dev/dogcat-tryhackme-walkthrough-php-lfi-rce-sudo-env-docker-escape?utm_source=hashnode&utm_medium=feed)

Platform: TryHackMe · Difficulty: Medium · Category: Web (PHP LFI) → RCE → sudo → Docker escape Stack: Apache 2.4.38 / PHP 7.4.3 (Debian, trong Docker container); 4 flag Tóm tắt Web app cho xem ảnh c

5 min read · [anhbii.hashnode.dev](https://anhbii.hashnode.dev/dogcat-tryhackme-walkthrough-php-lfi-rce-sudo-env-docker-escape?utm_source=hashnode&utm_medium=feed)

[Jul 3](https://hashnode.com/posts/dogcat-tryhackme-walkthrough-php-lfi-rce-sudo-env-docker-escape/6a47e90cf64173684b14bd4b)

### [Mr Robot CTF (TryHackMe) — Walkthrough: WordPress RCE → SUID nmap privesc](https://anhbii.hashnode.dev/mr-robot-ctf-tryhackme-walkthrough-wordpress-rce-suid-nmap-privesc?utm_source=hashnode&utm_medium=feed)

Platform: TryHackMe · Difficulty: Medium · Category: Web (WordPress) → Linux privesc Stack: Apache + WordPress (theme twentyfifteen), SSH; boot2root với 3 "key" (chuỗi 32 hex) Tóm tắt Máy chạy WordPr

4 min read · [anhbii.hashnode.dev](https://anhbii.hashnode.dev/mr-robot-ctf-tryhackme-walkthrough-wordpress-rce-suid-nmap-privesc?utm_source=hashnode&utm_medium=feed)

[Jul 3](https://hashnode.com/posts/mr-robot-ctf-tryhackme-walkthrough-wordpress-rce-suid-nmap-privesc/6a47dffb8659bd904c83fc50)

### [Wonderland — TryHackMe Web Challenge Walkthrough](https://anhbii.hashnode.dev/wonderland-tryhackme-web-challenge-walkthrough?utm_source=hashnode&utm_medium=feed)

Wonderland — TryHackMe Web Challenge Walkthrough Platform: TryHackMe · Difficulty: Medium · Category: Web foothold → Linux privesc (boot2root) Stack: Apache (port 80) + SSH; chuỗi leo quyền alice → ra

4 min read · [anhbii.hashnode.dev](https://anhbii.hashnode.dev/wonderland-tryhackme-web-challenge-walkthrough?utm_source=hashnode&utm_medium=feed)

[Jul 3](https://hashnode.com/posts/wonderland-tryhackme-web-challenge-walkthrough/6a47ce6193439f4bacd1ed55)