YYogeshwar PeelaOct 17 · 22 min readHackTheBox: Odori WriteupSummary Odori ships as an offline forensics box: the only live services are SSH and Samba, and an anonymously readable backup share just points to a BitLocker-encrypted VMDK handed out with the machinexploitnotes.hashnode.dev
YYogeshwar PeelaOct 12 · 8 min readTryHackMe: PlottedTMS WriteupSummary Plotted is a Linux CTF box hosting a PHP "Traffic Offense Management System" (TOMS) admin panel across two web services (ports 80 and 445). Initial enumeration uncovered decoy files and a leakexploitnotes.hashnode.dev
YYogeshwar PeelaOct 12 · 7 min readTryHackMe: Gallery WriteupSummary Gallery is a Linux box running a "Simple Image Gallery System" PHP application on port 8080. The login form is vulnerable to a classic SQL injection auth bypass, which grants admin access. Theexploitnotes.hashnode.dev
YYogeshwar PeelaSep 28 · 8 min readTryHackMe: Binary Heaven - WriteupSummary A locked-down TryHackMe box gating SSH access behind two credential-checking binaries: a small C program with an anti-debug/obfuscated string comparison, and a statically linked Go binary hidiexploitnotes.hashnode.dev
SSl4cK0THMay 6 · 7 min readTryHackMe — Recruit WalkthroughChallenge Link: https://tryhackme.com/room/recruitwebchallenge Introduction The "Recruit" challenge on TryHackMe is a fantastic playground for demonstrating how low-severity vulnerabilities can be ch1z2r.zor0ark.me
OOmar Al-KhaldiSep 27, 2025 · 9 min readHTB Networked : Flash WriteupTJNull : https://docs.google.com/spreadsheets/u/1/d/1dwSMIAPIam0PuRBkCiDI88pU3yzrqqHkDtBngUHNCw8/htmlview TL;DR flash cards Find web upload → bypass magic bytes → upload web shell → get shell as apache. Locate cron: /home/guly/crontab.guly running...omaralkhaldi.hashnode.dev
