--- title: "#reverse-shell articles | Hashnode" description: "Explore 28 articles tagged #reverse-shell on Hashnode. Tutorials, guides, and how-tos from the community." url: "https://hashnode.com/tag/reverse-shell" --- Tag # #reverse-shell 28 posts · 5 followers [Yogeshwar Peela](https://hashnode.com/@exploitnotes) · [Oct 7](https://hashnode.com/posts/tryhackme-seasurfer-writeup/6ac62062bef3e29f7cefc1f4) ### [TryHackMe - SeaSurfer writeup](https://exploitnotes.hashnode.dev/tryhackme-seasurfer-writeup?utm_source=hashnode&utm_medium=feed) Complete Sea Surfer TryHackMe writeup covering vhost enumeration, SSRF, LFI, WordPress RCE, tar wildcard injection, and SSH agent privilege escalation 15 min read · [exploitnotes.hashnode.dev](https://exploitnotes.hashnode.dev/tryhackme-seasurfer-writeup?utm_source=hashnode&utm_medium=feed) [Yogeshwar Peela](https://hashnode.com/@exploitnotes) · [Sep 22](https://hashnode.com/posts/tryhackme-python-playground-writeup/6ab26fe5d90980069bb54b19) ### [TryHackMe: Python Playground Writeup](https://exploitnotes.hashnode.dev/tryhackme-python-playground-writeup?utm_source=hashnode&utm_medium=feed) Python Playground TryHackMe writeup covering Python sandbox bypass, RCE, credential recovery, Docker container escape, and SUID privilege escalation. 8 min read · [exploitnotes.hashnode.dev](https://exploitnotes.hashnode.dev/tryhackme-python-playground-writeup?utm_source=hashnode&utm_medium=feed) [Yogeshwar Peela](https://hashnode.com/@exploitnotes) · [Sep 10](https://hashnode.com/posts/tryhackme-olympus-writeup/6aa27ae3a238c961e5e2b2b7) ### [TryHackMe - Olympus Writeup](https://exploitnotes.hashnode.dev/tryhackme-olympus-writeup?utm_source=hashnode&utm_medium=feed) Olympus TryHackMe writeup covering Victor CMS SQL injection, credential cracking, file upload RCE, SUID abuse, SSH access, and root shell. 10 min read · [exploitnotes.hashnode.dev](https://exploitnotes.hashnode.dev/tryhackme-olympus-writeup?utm_source=hashnode&utm_medium=feed) [Yogeshwar Peela](https://hashnode.com/@exploitnotes) · [Aug 23](https://hashnode.com/posts/brunnerctf-2026-the-three-ways-writeup/6a8b17fec9ed6fd6e84326ef) ### [BrunnerCTF 2026 : The Three Ways Writeup](https://exploitnotes.hashnode.dev/brunnerctf-2026-the-three-ways-writeup?utm_source=hashnode&utm_medium=feed) The Three Ways BrunnerCTF 2026 writeup: exploit Gitea, Drone CI, leaked secrets, and an unsigned rollout agent to gain root access. 18 min read · [exploitnotes.hashnode.dev](https://exploitnotes.hashnode.dev/brunnerctf-2026-the-three-ways-writeup?utm_source=hashnode&utm_medium=feed) [Lưu Tuấn Anh](https://hashnode.com/@anhlt120) · [Aug 20](https://hashnode.com/posts/windrelay-new-malware-duo-behind-the-wave-of-fraud/6a86c6c60f6b566655c68741) ### [WindRelay: New Malware Duo Behind the Wave of Fraud](https://blog.fiscybersec.com/windrelay-new-malware-duo-behind-the-wave-of-fraud?utm_source=hashnode&utm_medium=feed) Overview Did you know that it only takes 13 short minutes from the moment the victim picks up the phone to receive the support call from the "bank employee" until all the money in the account is evapo 12 min read · [blog.fiscybersec.com](https://blog.fiscybersec.com/windrelay-new-malware-duo-behind-the-wave-of-fraud?utm_source=hashnode&utm_medium=feed) [Yogeshwar Peela](https://hashnode.com/@exploitnotes) · [Aug 18](https://hashnode.com/posts/tryhackme-athena-writeup/6a8481693fa56856fb89762c) ### [TryHackMe : Athena Writeup](https://exploitnotes.hashnode.dev/tryhackme-athena-writeup?utm_source=hashnode&utm_medium=feed) Solve TryHackMe Athena using anonymous SMB, newline command injection, systemd script hijacking, and a modified Diamorphine LKM rootkit. 8 min read · [exploitnotes.hashnode.dev](https://exploitnotes.hashnode.dev/tryhackme-athena-writeup?utm_source=hashnode&utm_medium=feed) [Yogeshwar Peela](https://hashnode.com/@exploitnotes) · [Aug 15](https://hashnode.com/posts/tryhackme-different-ctf-writeup/6a7ffbe6f969e7468837dd43) ### [TryHackMe : Different CTF writeup](https://exploitnotes.hashnode.dev/tryhackme-different-ctf-writeup?utm_source=hashnode&utm_medium=feed) Complete TryHackMe Different CTF walkthrough covering steganography, FTP, WordPress, phpMyAdmin, webshells, sucrack, SUID, and root. 11 min read · [exploitnotes.hashnode.dev](https://exploitnotes.hashnode.dev/tryhackme-different-ctf-writeup?utm_source=hashnode&utm_medium=feed) [Yogeshwar Peela](https://hashnode.com/@exploitnotes) · [Aug 7](https://hashnode.com/posts/tryhackme-infinity-pool-writeup/6a75b6399d823577138e3c3f) ### [TryHackMe : Infinity Pool Writeup](https://exploitnotes.hashnode.dev/tryhackme-infinity-pool-writeup?utm_source=hashnode&utm_medium=feed) Complete TryHackMe Infinity Loop walkthrough exploiting command injection, credential leaks, FreePBX, and root RCE to capture both flags! 11 min read · [exploitnotes.hashnode.dev](https://exploitnotes.hashnode.dev/tryhackme-infinity-pool-writeup?utm_source=hashnode&utm_medium=feed) [1](https://hashnode.com/posts/tryhackme-infinity-pool-writeup/6a75b6399d823577138e3c3f) [Neville Iregi](https://hashnode.com/@m0ng00s3) · [May 5](https://hashnode.com/posts/hack-the-box-pennyworth/69fa6420a386d7f121dd57d8) ### [Hack The Box: Pennyworth](https://m0ng00s3-blog.hashnode.dev/hack-the-box-pennyworth?utm_source=hashnode&utm_medium=feed) Enumeration and DevOps security with a focus on misconfigured Jenkins 9 min read · [m0ng00s3-blog.hashnode.dev](https://m0ng00s3-blog.hashnode.dev/hack-the-box-pennyworth?utm_source=hashnode&utm_medium=feed) [recca0120](https://hashnode.com/@recca0120) · [Apr 21](https://hashnode.com/posts/reverse-ssh/69e7d45ddf8e020a52f7a5ce) ### [reverse\_ssh: Manage Reverse Shells With Native SSH Syntax, No VPN Required](https://recca0120.hashnode.dev/reverse-ssh?utm_source=hashnode&utm_medium=feed) reverse\_ssh flips SSH: target machines connect back to your server, and you connect to them with standard SSH syntax. HTTP/WebSocket/TLS transports punch through firewalls. SCP, SFTP, and port forwarding all work. 3 min read · [recca0120.hashnode.dev](https://recca0120.hashnode.dev/reverse-ssh?utm_source=hashnode&utm_medium=feed)