Oct 2, 2025 · 2 min read · Category: Enumeration / Privilege EscalationSource: TryHackMe Difficulty: EasyObjective: Capture user & root flags Task 1 Living up to the title. You were boasting on and on about your elite hacker skills in the bar and a few Bounty Hunters decided t...
Join discussion
Jul 11, 2025 · 3 min read · In this task, we explore the fundamentals of enumeration, exploitation, and privilege escalation on a vulnerable machine. By leveraging tools like Nmap, Gobuster, cURL, John the Ripper, and Steghide, we methodically uncover hidden directories, decode...
Join discussion
May 10, 2025 · 3 min read · In the world of ethical hacking and bug bounty hunting, privilege escalation is a crucial phase during post-exploitation. Once an attacker gains access to a system (typically as a low-privileged user), the next goal is often to escalate privileges to...
Join discussionSep 10, 2024 · 5 min read · In this writeup, we will explore Skynet, a vulnerable Linux machine inspired by the Terminator universe. We'll walk through the exploitation process, from initial reconnaissance to privilege escalation. Initial Reconnaissance We start by scanning the...
Join discussion
Sep 7, 2024 · 4 min read · Privilege escalation vulnerabilities pose a serious threat in many applications, allowing unauthorized users to gain access to higher-level permissions. One such vulnerability is "Unauthorized Privilege Escalation via Role Manipulation." This issue a...
Join discussion
Sep 8, 2024 · 1 min read · Lets understand MITRE ATT&CK framework in simple way. What is MITRE ATT&CK ? It was developed and released by MITRE Corporation.A non-profit organization in 2015.Acronym ATT&CK stands for Adversarial Tactics, Techniques and Common Knowledge.It acts a...
Join discussionSep 6, 2024 · 3 min read · SMB Scanning the machine we find the following services running: SMB (445) SQL Server (1433) We can list the shares or services by using the following command. smbclient -L //10.129.227.227 --user=Administator This works because the SMB server is...
Join discussionAug 6, 2024 · 5 min read · What Is Privilege Escalation? Privilege escalation is a process where an attacker gains elevated access to resources that are normally protected from an application or user. The result is that the attacker obtains privileges that they are not suppose...
Join discussion
Jul 16, 2024 · 2 min read · Intro: This type of escalation is a combination of both horizontal, and vertical privilege escalation. First, an attacker gains access to an standard account without any administrative privileges. After accessing the standard account, the attacker wi...
Join discussion
Jul 5, 2024 · 6 min read · Introduction In this lab, you start as the 'bilbo' user. You will assume a role with more privileges, discover a lambda function that applies policies to users, and exploit a vulnerability in the function to escalate the privileges of the Bilbo user ...
Join discussion