YPYogeshwar Peelainexploitnotes.hashnode.dev路4h ago 路 7 min readTryHackMe: Gallery WriteupSummary Gallery is a Linux box running a "Simple Image Gallery System" PHP application on port 8080. The login form is vulnerable to a classic SQL injection auth bypass, which grants admin access. The00
YPYogeshwar Peelainexploitnotes.hashnode.dev路4h ago 路 8 min readTryHackMe: PlottedTMS WriteupSummary Plotted is a Linux CTF box hosting a PHP "Traffic Offense Management System" (TOMS) admin panel across two web services (ports 80 and 445). Initial enumeration uncovered decoy files and a leak00
YPYogeshwar Peelainexploitnotes.hashnode.dev路Aug 12 路 7 min readTryHackMe : Lookup writeupSummary Lookup is an easy Linux box built around a login portal that redirects authenticated users to a vhost-hosted elFinder file manager. Username enumeration on the login form combined with passwor11N
NINeville Iregiinm0ng00s3-blog.hashnode.dev路May 25 路 11 min readHack The Box: VaccinePenetration testing is not simple, it requires lots of technical knowledge and the capability to think outside of the box. Sometimes you will find simple yet dangerous vulnerabilities, other times you00
VRVivek Redhuinstarting-out-in-cybersec.hashnode.dev路Oct 2, 2025 路 2 min readBounty Hacker CTF | TryHackMeCategory: Enumeration / Privilege EscalationSource: TryHackMe Difficulty: EasyObjective: Capture user & root flags Task 1 Living up to the title. You were boasting on and on about your elite hacker skills in the bar and a few Bounty Hunters decided t...00
PMpraveen magarinlinuxprivilegeescalation.hashnode.dev路Jul 22, 2025 路 3 min read馃毄 Privilege Escalation Using SUID and GTFOBinsPrivilege escalation is a core skill for penetration testers and ethical hackers. One common vector involves SUID (Set-user Identification) binaries. In this guide, I鈥檒l walk you through escalating privileges by leveraging SUID files and the GTFOBins...00
