YYogeshwar Peela·Oct 7TryHackMe - SeaSurfer writeupComplete Sea Surfer TryHackMe writeup covering vhost enumeration, SSRF, LFI, WordPress RCE, tar wildcard injection, and SSH agent privilege escalation15 min read·exploitnotes.hashnode.dev
YYogeshwar Peela·Sep 22TryHackMe: Python Playground WriteupPython Playground TryHackMe writeup covering Python sandbox bypass, RCE, credential recovery, Docker container escape, and SUID privilege escalation.8 min read·exploitnotes.hashnode.dev
YYogeshwar Peela·Sep 10TryHackMe - Olympus WriteupOlympus TryHackMe writeup covering Victor CMS SQL injection, credential cracking, file upload RCE, SUID abuse, SSH access, and root shell.10 min read·exploitnotes.hashnode.dev
YYogeshwar Peela·Aug 23BrunnerCTF 2026 : The Three Ways WriteupThe Three Ways BrunnerCTF 2026 writeup: exploit Gitea, Drone CI, leaked secrets, and an unsigned rollout agent to gain root access.18 min read·exploitnotes.hashnode.dev
LLưu Tuấn Anh·Aug 20WindRelay: New Malware Duo Behind the Wave of FraudOverview Did you know that it only takes 13 short minutes from the moment the victim picks up the phone to receive the support call from the "bank employee" until all the money in the account is evapo12 min read·blog.fiscybersec.com
YYogeshwar Peela·Aug 18TryHackMe : Athena WriteupSolve TryHackMe Athena using anonymous SMB, newline command injection, systemd script hijacking, and a modified Diamorphine LKM rootkit.8 min read·exploitnotes.hashnode.dev
YYogeshwar Peela·Aug 15TryHackMe : Different CTF writeupComplete TryHackMe Different CTF walkthrough covering steganography, FTP, WordPress, phpMyAdmin, webshells, sucrack, SUID, and root.11 min read·exploitnotes.hashnode.dev
YYogeshwar Peela·Aug 7TryHackMe : Infinity Pool WriteupComplete TryHackMe Infinity Loop walkthrough exploiting command injection, credential leaks, FreePBX, and root RCE to capture both flags!11 min read·exploitnotes.hashnode.dev21N
NNeville Iregi·May 5Hack The Box: PennyworthEnumeration and DevOps security with a focus on misconfigured Jenkins9 min read·m0ng00s3-blog.hashnode.dev
Rrecca0120·Apr 21reverse_ssh: Manage Reverse Shells With Native SSH Syntax, No VPN Requiredreverse_ssh flips SSH: target machines connect back to your server, and you connect to them with standard SSH syntax. HTTP/WebSocket/TLS transports punch through firewalls. SCP, SFTP, and port forwarding all work.3 min read·recca0120.hashnode.dev
