Tag

#command-injection

34 posts1 followers

Explore Hashnode

Alternatives

Nextcloud Collabora CVE-2026-110447: Webshells via proxy.php

CVE-2026-110447 CVSS 9.2 command injection in Nextcloud Collabora CODE Server. CISA KEV, active webshell attacks since September. Patch to 26.4.303.

5 min read404-founders.com

Yogeshwar PeelaSep 22

TryHackMe: Python Playground Writeup

Python Playground TryHackMe writeup covering Python sandbox bypass, RCE, credential recovery, Docker container escape, and SUID privilege escalation.

8 min readexploitnotes.hashnode.dev

Yogeshwar PeelaAug 23

BrunnerCTF : Git Gud Writeup (2026)

Exploit an attacker-controlled .git/config through core.fsmonitor to achieve server-side RCE and leak the flag via Git status output.

4 min readexploitnotes.hashnode.dev

Yogeshwar PeelaAug 18

TryHackMe : Athena Writeup

Solve TryHackMe Athena using anonymous SMB, newline command injection, systemd script hijacking, and a modified Diamorphine LKM rootkit.

8 min readexploitnotes.hashnode.dev

Yogeshwar PeelaAug 12

TryHackMe : Lookup writeup

Complete TryHackMe Lookup walkthrough covering username enumeration, elFinder RCE, SSH access, and sudo look abuse to read the root flag. step by step

7 min readexploitnotes.hashnode.dev

1

kareem MohamedAug 10

Infinity Pool: A walkthrough of THM Hacker Holidays - Day 11

Step-by-step THM Hacker Holidays Day 11 walkthrough. Exploit command injection, SSH tunneling, and FreePBX automation with 0xY0K4_CL4W.

4 min readkmb.hashnode.dev

Yogeshwar PeelaAug 7

TryHackMe : Infinity Pool Writeup

Complete TryHackMe Infinity Loop walkthrough exploiting command injection, credential leaks, FreePBX, and root RCE to capture both flags!

11 min readexploitnotes.hashnode.dev

1

Yogeshwar PeelaAug 8

TryHackMe : BreakMe Writeup

Complete TryHackMe BreakMe walkthrough covering WordPress privesc, command injection, TOCTOU race, SSH key cracking, and Python jail escape to root!!

17 min readexploitnotes.hashnode.dev

Yogeshwar PeelaJul 17

HackTheBox : Void Whispers Writeup

Learn how to exploit the Void Whispers challenge using OS command injection, bypass the space filter with IFS, and retrieve the flag safely. Now! Fast

4 min readexploitnotes.hashnode.dev