JJebitokinsharonjebitok.com·4d ago · 13 min readLinux Privilege Escalation: AutomationLink to the challenge on TryHackMe: Linux Privilege Escalation: Automation Introduction Automation earns its keep in privilege escalation the moment you stop treating it as a replacement for manual en00
Aaivr-bloginaivr.hashnode.dev·Aug 24 · 3 min readSudo Privilege Escalation to Root via Sudoedit Multi-Argument Policy BypassSummary A local user who is permitted to run sudoedit as root via wildcard-limited rule can bypass pathname restriction and use affected C Sudo builds to read or modify files outside of the intended d00
YPYogeshwar Peelainexploitnotes.hashnode.dev·Aug 23 · 8 min readBrunnerCTF : WordPressed to Root WriteupOverview The box ships a mostly-stock WordPress 7.0.0 install on PHP 8.2 / Apache, running on a Debian Trixie base image, packaged as a Docker/Kubernetes challenge deployment. Initial access comes thr00
YPYogeshwar Peelainexploitnotes.hashnode.dev·Aug 23 · 8 min readBrunnerCTF : Bink Ink WriteupSummary The challenge exposes a firmware update service ("Bink ink update tool v1.0.5") running as brunner_operator inside a Debian container, reachable only through a Squid proxy. The tool accepts te00
YPYogeshwar Peelainexploitnotes.hashnode.dev·Aug 18 · 8 min readTryHackMe : Athena WriteupOverview Athena is an easy-rated TryHackMe box that chains a leaked internal path (found via an anonymous SMB share) into a command injection vulnerability in a "router panel" ping tool, followed by a00
YPYogeshwar Peelainexploitnotes.hashnode.dev·Aug 12 · 7 min readTryHackMe : Lookup writeupSummary Lookup is an easy Linux box built around a login portal that redirects authenticated users to a vhost-hosted elFinder file manager. Username enumeration on the login form combined with passwor11N
YPYogeshwar Peelainexploitnotes.hashnode.dev·Aug 10 · 13 min readTryHackMe : Dreaming WriteupSummary Dreaming is a Linux box built around a Pluck CMS install. Brute-forcing the CMS admin login gives access to the admin panel, which is then abused via a known authenticated file-upload RCE (CVE11N
YPYogeshwar Peelainexploitnotes.hashnode.dev·Aug 10 · 15 min readTryHackMe : WhyHackMe writeupSummary WhyHackMe is an medium Linux box that chains a handful of low-friction bugs into root. Anonymous FTP leaks a hint pointing at a pass.txt file that's only reachable from localhost. The blog app10
AGArnav Guptainarnav.tech·Jun 3 · 6 min readUsing Howdy on Linux like Windows HelloI use a Logitech Brio webcam, which has an infrared camera and works quite nicely with Windows Hello. On Linux, the closest equivalent I have found is Howdy, which lets you use face authentication via00
UOUcheagwu Onyikeinucheagwuonyike.hashnode.dev·Jan 16 · 5 min readHow To Enable MFA For Sudo and SSH AccessMulti-Factor Authentication (MFA) adds a critical security layer to your Linux servers by requiring users to prove their identity through something they know (SSH key or password) and something they have (a time-based one-time password from their pho...00
