Feed
Pro
Search

Sign in
Darkshift - a dark factory for software Bug0 - The AI-native e2e QA regression testing The foreword by Hashnode - official blog from the Hashnode team Passmark - The open-source AI framework for regression testing Hashnode gql skill - let your AI agent publish to your Hashnode blog Hackathons Changelog Brand @hashnode on X Hashnode on LinkedIn Support - hello+support@hashnode.com Code of Conduct Terms Privacy Sitemap

Search Hashnode

Search posts, tags, users, and pages

Discussion on "TryHackMe : Infinity Pool Writeup" | Hashnode

FeedDiscussion

Yogeshwar Peela

Aug 7

TryHackMe : Infinity Pool Writeup

Summary Recon on <MACHINE_IP> revealed a Gunicorn-hosted "Byte Lotus" hotel site with two paths disallowed in robots.txt - /internal/ and /status. The /status page exposes an internal staff tool ("Sis

exploitnotes.hashnode.dev11 min read

#tryhackme #infinity-loop #tryhackme-infinity-loop #linux #linux-privilege-escalation #command-injection #os-command-injection #rce #gunicorn #flask #freepbx #reverse-shell #privilege-escalation #web-exploitation #ctf-writeup #cybersecurity

Responses(1)

NANGYSEC

🔐NANGYSEC || 💻Cybersecurity Enthusiast || Learning by doing || Building in public.

Interesting

#penetration-testing