Ddamienanon14ininfinitedomain.hashnode.dev·9h ago · 4 min read# From the Skip to the Shell: The Room That Wasn't on the Floor PlanI finally started TryHackMe properly this week. This post is the first thing I actually solved there, and it's a small one, but it taught me something I didn't expect from a room rated "very easy." Th00
FFalkenkralleinttpsandtricks.hashnode.dev·14h ago · 9 min readTemplate TerrorMay I welcome you to the moment where an "easy level" school ctf yeeted me off Mount Stupid. Let me present to you: drum roll SERVER SIDE TEMPLATE INJECTION (SSTI) The innocent beginning We start with00
YPYogeshwar Peelainexploitnotes.hashnode.dev·Jul 24 · 18 min readTryHackMe : Enterprise WriteupSummary Enterprise is an Active Directory box that starts as a classic external AD footprint (DNS, Kerberos, LDAP, SMB, RDP, WinRM) plus two extra web ports: an IIS site on 80 and a Bitbucket-branded 00
00ordin0ord.hashnode.dev·Jul 23 · 7 min readHackTheBox Monitors WalkthroughHackTheBox Monitors Walkthrough HасkTheBox іs a pоpulаr ѕеrvіce offering оvеr 240 maсhіnеѕ and tоnѕ of challenges so you can extend and improve your cybersecurity skills. HTB Monitors is an advanced 01F
YPYogeshwar Peelainexploitnotes.hashnode.dev·Jul 22 · 8 min readTryHackMe : FoolMate WriteupSummary Endgame Trainer is a small web app that presents a "mate-in-one" chess puzzle. The board is legit (built on the chess.js library), but the app has a gimmick: if you actually play the winning m00
YPYogeshwar Peelainexploitnotes.hashnode.dev·Jul 19 · 17 min readHackTheBox : Logging WriteupSummary Logging is a Windows Active Directory box built around a long, credential-chaining path from a leaked service account password to full domain compromise. Initial access starts with SMB access 00
VGVivek Goswamiinvivekgoswami.hashnode.dev·Jul 19 · 2 min readTryHackMe’s Room - Tomghost Walkthrough Reconnaissance I usually begin with a classic Network Mapper(nmap) scan with the service version detection and aggressive scanning. As we can see here 22,53,8009,8080 are in open state 8080 HTTP wit10
LMLakindu Mansarainlmsecurity.hashnode.dev·Jul 15 · 12 min readOverTheWire Bandit: Level 15 → Level 20 Walk-through Introduction Welcome back to my OverTheWire Bandit journey! In this article, I continue from Level 15 and work through to Level 20. These levels introduce more networking concepts, secure communicatio00
JJebitokinsharonjebitok.com·Jul 14 · 24 min readBroken Authentication (TryHackMe)Link to the challenge/walkthrough on TryHackMe: Broken Authentication Introduction Authentication is the process by which a web application verifies the identity of the user making a request. It typic00
LMLakindu Mansarainlmsecurity.hashnode.dev·Jul 14 · 7 min readOverTheWire Bandit: Level 0 → Level 12 Walk-throughFor anyone building a foundation in cybersecurity, comfort with the Linux command line is non-negotiable. OverTheWire's Bandit wargame is widely recommended as a starting point. Because each level of 00
