YYogeshwar PeelaOct 12 · 8 min readTryHackMe: PlottedTMS WriteupSummary Plotted is a Linux CTF box hosting a PHP "Traffic Offense Management System" (TOMS) admin panel across two web services (ports 80 and 445). Initial enumeration uncovered decoy files and a leakexploitnotes.hashnode.dev
YYogeshwar PeelaOct 12 · 7 min readTryHackMe: Gallery WriteupSummary Gallery is a Linux box running a "Simple Image Gallery System" PHP application on port 8080. The login form is vulnerable to a classic SQL injection auth bypass, which grants admin access. Theexploitnotes.hashnode.dev
VVũ Nhật LâmOct 6 · 9 min readMikroTrick: Two SSH Bugs Chained into Passwordless Admin on RouterOSSummary MikroTrick is CERT Polska's name for a two-vulnerability chain in RouterOS that gives an attacker full access to the administrative console with no password and no SSH key. Two things make thiblog.fiscybersec.com
YYogeshwar PeelaSep 9 · 4 min readTryHackMe - CyberHeroes WriteupSummary CyberHeros is an easy-rated web challenge built on the iPortfolio Bootstrap template. The site advertises a "login page" challenge directly in its About section. Inspection of login.html reveaexploitnotes.hashnode.dev
SSyed Muhammad AliAug 30 · 15 min readWhat Is Authentication? A Beginner's Guide (2026)Every time you type your email and password into a login form, something is quietly deciding whether you actually get in. That decision — proving you are who you say you are — is called authenticationdevstacked.hashnode.dev
AAlireza KalhorAug 25 · 7 min readCVE-2026-17532: nonce: true => Web ShellUnauthenticated reflected XSS to 1-click RCE in Seraphinite Accelerator, a WordPress caching plugin on 50,000+ sites. The site that looked clean What would you do if I told you that just by opening ykalhor.hashnode.dev
YYogeshwar PeelaAug 4 · 8 min readTryHackMe : Do Not Disturb WriteupTL;DR Byte Lotus Poolside is a Node.js/Express booking app. A NoSQL injection in the login endpoint bypasses authentication entirely and lands directly in the staff role. The staff console's booking-c1exploitnotes.hashnode.dev
YYogeshwar PeelaJul 18 · 4 min readFAM CTF : The Vault Door WriteupSummary NexaVault is a mock internal dashboard app that gates an "Admin Vault" panel behind a role claim in a JWT. The app issues a user-role token on login, stored in the nx_access cookie, and trustsexploitnotes.hashnode.dev
YYogeshwar PeelaJul 17 · 4 min readHackTheBox : WayWitch WriteupSummary The ticket portal generates guest session JWTs client-side, signing them with an HMAC secret (halloween-secret) that's hardcoded directly in the page's JavaScript. Since the server verifies toexploitnotes.hashnode.dev
YYogeshwar PeelaJul 12 · 4 min readBroncoCTF : Super Secure ServerExecutive Summary Super Secure Server presents a login form that appears to check a username and password, but does nothing of the sort. The page's own JavaScript fetches the "secret" credentials fromexploitnotes.hashnode.dev
