YYogeshwar Peela·Aug 11TryHackMe : The London Bridge writeupTryHackMe London Bridge walkthrough covering SSRF, loopback bypass, root HTTP server, SSH key theft, symlink abuse, and Firefox credential recovery.18 min read·exploitnotes.hashnode.dev11N
YYogeshwar Peela·Aug 10TryHackMe : Dreaming WriteupTryHackMe Dreaming walkthrough covering Pluck CMS brute force, CVE-2020-29607 RCE, MySQL command injection, and Python library hijacking.13 min read·exploitnotes.hashnode.dev11N
YYogeshwar Peela·Aug 10TryHackMe : WhyHackMe writeupFull Hack The Box WhyHackMe walkthrough covering blind stored XSS, localhost credential theft, SSH, iptables, PCAP analysis, CGI RCE, and root access.15 min read·exploitnotes.hashnode.dev1
YYogeshwar Peela·Aug 4TryHackMe : Towel on the Sunbed WriteupComplete Towel on the Sunbed THM walkthrough covering race conditions, TOCTOU exploitation, concurrent requests, and vault flag recovery.6 min read·exploitnotes.hashnode.dev1
YYogeshwar Peela·Aug 4TryHackMe : Beach Bar WriteupComplete Beach Bar THM walkthrough covering Flask YAML deserialization, RCE, privilege escalation, and full root compromise.7 min read·exploitnotes.hashnode.dev1
YYogeshwar Peela·Aug 4TryHackMe : Do Not Disturb WriteupComplete Do Not Disturb THM walkthrough covering NoSQL injection, EJS SSTI, Node Inspector abuse, privilege escalation, and root.8 min read·exploitnotes.hashnode.dev1
YYogeshwar Peela·Aug 4TryHackMe : Overheard at BreakfastComplete Overheard at Breakfast THM walkthrough covering OSINT, Gravatar profile lookup, email hashing, Base64 decoding, and flag recovery.5 min read·exploitnotes.hashnode.dev1
YYogeshwar Peela·Aug 4TryHackMe : Packed Light WriteupComplete Packed Light THM walkthrough covering PCAP analysis, malware investigation, network forensics, traffic decoding, and flag recovery.6 min read·exploitnotes.hashnode.dev1
YYogeshwar Peela·Jul 22TryHackMe : FoolMate WriteupLearn how FoolMate was solved by bypassing a client-side checkmate gate and exploiting the API move endpoint to capture the flag.8 min read·exploitnotes.hashnode.dev
SsOn4jit·Dec 11, 2025THM Merry XSSmas Writeup: Learning Reflected and Stored XSS AttacksThis writeup covers TryHackMe Advent of Cyber 2025 Day 11: Merry XSSmas. The objective is to understand reflected XSS, stored XSS, payload injection, and basic web exploitation techniques.5 min read·blog.sonajit.in2
