MMuhammad Abdullah·Oct 11Linux Fundamentals #02 — Understanding sudo and the Root UserUnderstand Linux administrative privileges, sudo, the root user, shell prompts, whoami, and sudo bash with beginner-friendly examples.2 min read·mabdullahdevx.hashnode.dev
JJebitok·Sep 9Linux Privilege Escalation: AutomationLink to the challenge on TryHackMe: Linux Privilege Escalation: Automation Introduction Automation earns its keep in privilege escalation the moment you stop treating it as a replacement for manual en13 min read·sharonjebitok.com
Aaivr-blog·Aug 24Sudo Privilege Escalation to Root via Sudoedit Multi-Argument Policy BypassLocal users can bypass restrictions based on specific configurations with sudoedit and use affected C Sudo builds to modify files as root.3 min read·aivr.hashnode.dev
YYogeshwar Peela·Aug 23BrunnerCTF : WordPressed to Root WriteupBrunnerCTF WordPressed to Root walkthrough covering WordPress RCE, CVEs, sudo chroot exploitation, NSS injection, privilege escalation, and root.8 min read·exploitnotes.hashnode.dev
YYogeshwar Peela·Aug 23BrunnerCTF : Bink Ink WriteupBrunnerCTF Bink Ink walkthrough covering proxy access, path traversal, arbitrary file write, sudo abuse, SquashFS payloads, and root escalation.8 min read·exploitnotes.hashnode.dev
YYogeshwar Peela·Aug 18TryHackMe : Athena WriteupSolve TryHackMe Athena using anonymous SMB, newline command injection, systemd script hijacking, and a modified Diamorphine LKM rootkit.8 min read·exploitnotes.hashnode.dev
YYogeshwar Peela·Aug 12TryHackMe : Lookup writeupComplete TryHackMe Lookup walkthrough covering username enumeration, elFinder RCE, SSH access, and sudo look abuse to read the root flag. step by step7 min read·exploitnotes.hashnode.dev11N
YYogeshwar Peela·Aug 10TryHackMe : Dreaming WriteupTryHackMe Dreaming walkthrough covering Pluck CMS brute force, CVE-2020-29607 RCE, MySQL command injection, and Python library hijacking.13 min read·exploitnotes.hashnode.dev11N
YYogeshwar Peela·Aug 10TryHackMe : WhyHackMe writeupFull Hack The Box WhyHackMe walkthrough covering blind stored XSS, localhost credential theft, SSH, iptables, PCAP analysis, CGI RCE, and root access.15 min read·exploitnotes.hashnode.dev1
AArnav Gupta·Jun 3Using Howdy on Linux like Windows Helloand falling back to password when the webcam is disconnected6 min read·arnav.tech