AAnirudh·Nov 3SmartHire - hackthebox writeupIntroduction Smarthire is a medium rated machine in hackthebox released off-season. This is the first box I submitted to hackthebox and was approved. I expected it to be approved as an easy box, but h11 min read·blog.redtrib3.in
CCannon bolt·Nov 2TryHackMe - SeeTwoIn this task, we have to step into the digital forensics analyst's shoes and investigate the incident. Let's start our investigation by downloading the evidence.zip file. Unzipping it yields a .pcap f5 min read·jetray.hashnode.dev
NNano·Oct 26Forest WriteUpHTB Forest writeup: ASREPRoasting, BloodHound enumeration, and Exchange Windows Permissions abuse to achieve DCSync and Domain Admin.4 min read·blog.0xnano.com
AAbdulaziz Saad·Aug 18The $1000 Ticket IDOR: One Number Exposed National IDs and Government Staff PIISeverity: HighBounty: ~$949Program: Private Bug BountyPlatform: Bugbounty.sa This finding started with a very simple endpoint: GET /api/tickets-management/portal/history-by-ticket/<ticket_id> The end10 min read·blog.abdulaziz-d.com3
AAbdulaziz Saad·Aug 17From Editor to Owner: One Writable Field Was Enough to Take Over an OrganizationSeverity: HighBounty: ~$315Platform: Standoff365 This one came down to a single field that should never have been writable by an editor: Firm[user_id] The application had a clear permission model. An12 min read·blog.abdulaziz-d.com1
YYogeshwar Peela·Aug 6TryHackMe : The Hollow ShellComplete TryHackMe Hollow Shell walkthrough exploiting Zip Slip and unsafe hooks for RCE, gaining roomservice access and capturing the flag! Steps5 min read·exploitnotes.hashnode.dev1
YYogeshwar Peela·Aug 4TryHackMe : CryptoCabana WriteupComplete TryHackMe CryptoCabana walkthrough exploiting SAS token leaks, Key Vault secret versioning, and Service Principal exposure to recover flag.7 min read·exploitnotes.hashnode.dev1
YYogeshwar Peela·Aug 4TryHackMe : Towel on the Sunbed WriteupComplete Towel on the Sunbed THM walkthrough covering race conditions, TOCTOU exploitation, concurrent requests, and vault flag recovery.6 min read·exploitnotes.hashnode.dev1
YYogeshwar Peela·Aug 4TryHackMe : Beach Bar WriteupComplete Beach Bar THM walkthrough covering Flask YAML deserialization, RCE, privilege escalation, and full root compromise.7 min read·exploitnotes.hashnode.dev1
YYogeshwar Peela·Aug 4TryHackMe : Overheard at BreakfastComplete Overheard at Breakfast THM walkthrough covering OSINT, Gravatar profile lookup, email hashing, Base64 decoding, and flag recovery.5 min read·exploitnotes.hashnode.dev1
