YPYogeshwar Peelainexploitnotes.hashnode.dev·2h ago · 7 min readTryHackMe : Compiled WriteupChallenge Summary A stripped-looking ELF binary (Compiled-1688545393558.Compiled) prompts for a password and prints either Correct! or Try again!. The goal is to reverse-engineer the binary to find th00
MM1Hinm1h.hashnode.dev·3d ago · 4 min readChained Exploitation: From WordPress Vulnerable Plugin to Docker Container Breakout Achieving RootObjective: You have been hired to perform a penetration test on a single host in a company's network. Your task is to identify all vulnerabilities and demonstrate impact to the client by elevating you10
YPYogeshwar Peelainexploitnotes.hashnode.dev·Aug 10 · 35 min readTryHackMe : Overflow The Jackpot writeup# Challenge Category Flag 1 B1t Recovery Crypto THM{[REDACTED]} 2 Lost Fortune Included Web THM{REDACTED} 3 Casino Heist Forensics THM{REDACTED} 4 Fresh Powder - Bonus Challenge Detection Eng10
YPYogeshwar Peelainexploitnotes.hashnode.dev·Aug 10 · 13 min readTryHackMe : Dreaming WriteupSummary Dreaming is a Linux box built around a Pluck CMS install. Brute-forcing the CMS admin login gives access to the admin panel, which is then abused via a known authenticated file-upload RCE (CVE11N
YPYogeshwar Peelainexploitnotes.hashnode.dev·Aug 7 · 11 min readTryHackMe : Infinity Pool WriteupSummary Recon on <MACHINE_IP> revealed a Gunicorn-hosted "Byte Lotus" hotel site with two paths disallowed in robots.txt - /internal/ and /status. The /status page exposes an internal staff tool ("Sis21N
Tturtle01inturtle01.hashnode.dev·Aug 7 · 4 min readInfinity Pool (TryHackMe) — Chaining Small Findings into Complete System CompromiseInfinity Pool (TryHackMe) — Chaining Small Findings into Complete System Compromise Note: This write-up provides a high-level overview of my approach to solving the room. Due to time constraints, I00
YPYogeshwar Peelainexploitnotes.hashnode.dev·Aug 4 · 8 min readTryHackMe : Do Not Disturb WriteupTL;DR Byte Lotus Poolside is a Node.js/Express booking app. A NoSQL injection in the login endpoint bypasses authentication entirely and lands directly in the staff role. The staff console's booking-c10
00ordin0ord.hashnode.dev·Jul 29 · 4 min readTryHackMe Boiler WalkthroughTryHackMe Boiler Walkthrough TrуHаckMe iѕ a famouѕ infоѕес-focused leаrnіng plауgrоund оfferіng еducation and practicing rooms for everyone interested. The Boiler CTF room is considered an intermedia01V
LVLong Voinlongvh0904.hashnode.dev·Jul 21 · 42 min readHTB Attack Diaries - Bedside: The Clinic That Deserialized Its Own DeathIntroduction Bedside is a Medium-rated Linux box dressed up as a heart clinic "transitioning into the age of AI." And like most things that promise AI, what sits underneath the glossy paint is a chain00
YPYogeshwar Peelainexploitnotes.hashnode.dev·Jul 18 · 13 min readFAM CTF: The Library to The Endpoint WriteupExecutive Summary FAM is a mobile CTF challenge distributed as an Android APK (fam-ctf.apk) with four staged flags, each themed around a different layer of the app's Firebase backend: The Library (nat00
