--- title: "#exploitation articles | Hashnode" description: "Explore 36 articles tagged #exploitation on Hashnode. Tutorials, guides, and how-tos from the community." url: "https://hashnode.com/tag/exploitation" --- Tag # #exploitation 36 posts · 9 followers [Jebitok](https://hashnode.com/@w1t3r) · [Sep 9](https://hashnode.com/posts/exploitation-and-weaponisation-tryhackme/6aa0b54516ca66e207b970c0) ### [Exploitation and Weaponisation (TryHackMe)](https://www.sharonjebitok.com/exploitation-and-weaponisation-tryhackme?utm_source=hashnode&utm_medium=feed) Link to challenge on TryHackMe: Exploitation and Weaponisation Introduction The word "weaponisation" is used differently depending on context. In this room, it means turning a confirmed vulnerabilit 27 min read · [sharonjebitok.com](https://www.sharonjebitok.com/exploitation-and-weaponisation-tryhackme?utm_source=hashnode&utm_medium=feed) [Uday Bhale](https://hashnode.com/@rudraub) · [Jul 28](https://hashnode.com/posts/tryhackme-hacker-s-holiday-2026-day-02/6a68e4b34683d32627992f5d) ### [🏖️TryHackMe Hacker's Holiday 2026 | Day 2: Room 404 - Exposed Source Code](https://hackwithrudraub.hashnode.dev/tryhackme-hacker-s-holiday-2026-day-02?utm_source=hashnode&utm_medium=feed) Explore Room 404 from TryHackMe Hacker's Holiday 2026 and learn how an exposed Git repository was used to recover the source code. 2 min read · [hackwithrudraub.hashnode.dev](https://hackwithrudraub.hashnode.dev/tryhackme-hacker-s-holiday-2026-day-02?utm_source=hashnode&utm_medium=feed) [Jebitok](https://hashnode.com/@w1t3r) · [Jun 4](https://hashnode.com/posts/metasploit-scanning-and-exploitation-tryhackme/6a21dfebdec861565fe034d0) ### [Metasploit: Scanning and Exploitation (TryHackMe)](https://www.sharonjebitok.com/metasploit-scanning-and-exploitation-tryhackme?utm_source=hashnode&utm_medium=feed) Link to the Walkthrough/Challenge on TryHackMe: Metasploit: Scanning and Exploitation Introduction In the previous room, you learned how to navigate the Metasploit Framework: searching for modules, co 37 min read · [sharonjebitok.com](https://www.sharonjebitok.com/metasploit-scanning-and-exploitation-tryhackme?utm_source=hashnode&utm_medium=feed) [Jebitok](https://hashnode.com/@w1t3r) · [Jun 3](https://hashnode.com/posts/cyber-kill-chain-tryhackme/6a207ff59ab0bcd5d196b7f7) ### [Cyber Kill Chain (TryHackMe)](https://www.sharonjebitok.com/cyber-kill-chain-tryhackme?utm_source=hashnode&utm_medium=feed) Link to the Walkthrough on TryHackMe: Cyber Kill Chain Introduction Inspired by the military kill chains, the Cyber Kill Chain is a cyber security framework introduced by Lockheed Martin in 2011. It i 20 min read · [sharonjebitok.com](https://www.sharonjebitok.com/cyber-kill-chain-tryhackme?utm_source=hashnode&utm_medium=feed) [aviral srivastava](https://hashnode.com/@aviralxroot) · [Mar 19](https://hashnode.com/posts/cve-2026-33017-how-i-found-an-unauthenticated-rce-in-langflow-by-reading-the-code-they-already-fixed/69bbcf228c55d6eefbccbc2d) ### [CVE-2026-33017: How I Found an Unauthenticated RCE in Langflow by Reading the Code They Already Fixed](https://aviraxroot.hashnode.dev/cve-2026-33017-how-i-found-an-unauthenticated-rce-in-langflow-by-reading-the-code-they-already-fixed?utm_source=hashnode&utm_medium=feed) How I found a Critical RCE in Langflow by checking the code path that the previous CISA KEV fix missed. One curl request, no auth, full compromise. 9 min read · [aviraxroot.hashnode.dev](https://aviraxroot.hashnode.dev/cve-2026-33017-how-i-found-an-unauthenticated-rce-in-langflow-by-reading-the-code-they-already-fixed?utm_source=hashnode&utm_medium=feed) [Jebitok](https://hashnode.com/@w1t3r) · [Feb 16](https://hashnode.com/posts/django-cve-2025-64459-tryhackme/69937ae13d69426689a46d0f) ### [Django: CVE-2025-64459 (TryHackMe)](https://www.sharonjebitok.com/django-cve-2025-64459-tryhackme?utm_source=hashnode&utm_medium=feed) Introduction Django is a widely used Python web framework that exposes Object-Relational Mapping (ORM) layer to let developers query databases using familiar Python syntax. That convenience becomes a liability when user input is fed straight into ORM... 5 min read · [sharonjebitok.com](https://www.sharonjebitok.com/django-cve-2025-64459-tryhackme?utm_source=hashnode&utm_medium=feed) [Vũ Nhật Lâm](https://hashnode.com/@kami61) · [Dec 30, 2025](https://hashnode.com/posts/phat-hien-lo-hong-rce-nghiem-trong-trong-nen-tang-tu-dong-hoa-n8n-cve-2025-68613/69537ae0846d665612291510) ### [Phát hiện lỗ hổng RCE nghiêm trọng trong nền tảng tự động hóa n8n (CVE-2025-68613)](https://blog.fiscybersec.com/phat-hien-lo-hong-rce-nghiem-trong-trong-nen-tang-tu-dong-hoa-n8n-cve-2025-68613?utm_source=hashnode&utm_medium=feed) Mở đầu Một lỗ hổng bảo mật cực kỳ nghiêm trọng vừa được công bố trong nền tảng tự động hóa quy trình n8n, cho phép thực thi mã từ xa (Remote Code Execution – RCE) thông qua cơ chế xử lý biểu thức phía máy chủ. Lỗ hổng được định danh là CVE-2025-68613... 5 min read · [blog.fiscybersec.com](https://blog.fiscybersec.com/phat-hien-lo-hong-rce-nghiem-trong-trong-nen-tang-tu-dong-hoa-n8n-cve-2025-68613?utm_source=hashnode&utm_medium=feed) [pwn](https://hashnode.com/@pwn) · [Dec 21, 2025](https://hashnode.com/posts/my-writeup-0day-in-zsh-rce/6947cd8362f3c62c7203c2d9) ### [My Writeup (0day in Zsh (RCE))](https://my-writeup-0day-in-zsh-rce.hashnode.dev/my-writeup-0day-in-zsh-rce?utm_source=hashnode&utm_medium=feed) I am Rana M.Sinan Adil aka (livepwn). I am 17 years old i was working on bug and also created a exploit.Hope you will enjoy :) How it worked: I have two laptop, lp1 and lp2. I run the exploit in lp1 just changed the ip and putted ip of my lp2. And i ... 6 min read · [my-writeup-0day-in-zsh-rce.hashnode.dev](https://my-writeup-0day-in-zsh-rce.hashnode.dev/my-writeup-0day-in-zsh-rce?utm_source=hashnode&utm_medium=feed) [microbytesec](https://hashnode.com/@microbytesec) · [Dec 17, 2025](https://hashnode.com/posts/hacking-exposed-exploiting-a-classic-buffer-overflow-for-hedgehogs/6942be1e38f3c2af46f04dbd) ### [Hacking Exposed: Exploiting a Classic Buffer Overflow for HedgeHogs](https://microbytesecurity.hashnode.dev/hacking-exposed-exploiting-a-classic-buffer-overflow-for-hedgehogs?utm_source=hashnode&utm_medium=feed) Understanding binary exploitation is one of the most important foundations in penetration testing. Classic buffer overflow vulnerabilities shaped the history of computing, and although modern systems now use stronger defenses like DEP and ASLR, these... 7 min read · [microbytesecurity.hashnode.dev](https://microbytesecurity.hashnode.dev/hacking-exposed-exploiting-a-classic-buffer-overflow-for-hedgehogs?utm_source=hashnode&utm_medium=feed) [Jebitok](https://hashnode.com/@w1t3r) · [Nov 8, 2025](https://hashnode.com/posts/pwnkit-cve-2021-4034-tryhackme/690f98b23d01e03f1dc1ed82) ### [Pwnkit: CVE-2021-4034 (TryHackMe)](https://www.sharonjebitok.com/pwnkit-cve-2021-4034-tryhackme?utm_source=hashnode&utm_medium=feed) CVE-2021-4034 — aka Pwnkit — is a high-severity local privilege escalation in the Polkit package that was present in Polkit releases dating back to 2009. Because Polkit is installed by default on most mainstream Linux distributions, this vulnerabilit... 9 min read · [sharonjebitok.com](https://www.sharonjebitok.com/pwnkit-cve-2021-4034-tryhackme?utm_source=hashnode&utm_medium=feed)