Chained Exploitation on lookup.thm: Web Vuln - SUID - Sudo Bypass
This is a complete walkthrough of the lookup.thm machine, showcasing all stages from reconnaissance to privilege escalation. The box
Log
Insights
Writeups, analyses, and notes from the field - newest first.
Building a Segmented Red-Team Homelab: Routers, DMZ, and a Full Active Directory Environment
This blog post documents the current, fully working state of a multi-segment Red-Team homelab. The focus of this
Evaluating Open-Xchange as an On-Premise Groupware Alternative
This project is part of my current work within the company and is something I am working on alongside my
Simple CTF - Full Walkthrough
This post covers my full approach to the TryHackMe box Simple CTF, a beginner-friendly machine that turned out to
Between Exams and Experience
On October 25th, I received my results for the intermediate examination (AP1). To be honest, I hadn’t expected much,
Skynet: SMB Leaks, Squirrelmail, and a Tar Wildcard to Root
I haven't touched TryHackMe or done any structured CTF work in quite a while, so I figured it
A Quick Life & Learning Update
After quite a break, I'm finally back and ready to get more active here again. The past few
Pushing Through - ITIL Certified and What Comes Next
Lately things have been moving fast. I’m currently deep in a demanding learning phase, and time is tight. With
Hacking the Game Zone - SQLi, SSH Tunnels, and Root Access
The TryHackMe room Game Zone was a great opportunity to revisit some fundamental offensive techniques in a very streamlined and
HackPark: BlogEngine.NET RCE, Meterpreter, and a Writable Service Binary to SYSTEM
The HackPark room on TryHackMe is a well-structured Windows-based lab that walks through multiple real-world attack techniques:
Starting Offensive Pentesting: Jenkins RCE to SYSTEM on Alfred
After completing the Web Penetration Testing path, I was more than ready for a shift in focus. The Web module
What's Your Name?: Stored XSS to Full Admin Takeover
This write-up covers the exploitation process of a client-side vulnerability in the TryHackMe room What's Your