Relevant - Chaining SMB, IIS and Token Impersonation into SYSTEM
Windows environments are rarely compromised through a single vulnerability alone. In most real world scenarios, attackers chain together several smaller
Tag
Corp Walkthrough - Kerberoasting
This room focuses on several common techniques used during Windows and Active Directory security assessments. The objective is to move
Chained Exploitation on lookup.thm: Web Vuln - SUID - Sudo Bypass
This is a complete walkthrough of the lookup.thm machine, showcasing all stages from reconnaissance to privilege escalation. The box
Simple CTF - Full Walkthrough
This post covers my full approach to the TryHackMe box Simple CTF, a beginner-friendly machine that turned out to
Getting Back Into the Flow: A Full Walkthrough of "Skynet"
I haven’t touched TryHackMe or done any structured CTF work in quite a while, so I figured it was
Hacking the Game Zone - SQLi, SSH Tunnels, and Root Access
The TryHackMe room Game Zone was a great opportunity to revisit some fundamental offensive techniques in a very streamlined and
Full Compromise of HackPark
The HackPark room on TryHackMe is a well-structured Windows-based lab that walks through multiple real-world attack techniques:
From Web Exploitation to Offensive Operations
After completing the Web Penetration Testing path, I was more than ready for a shift in focus. The Web module
Exploiting Stored XSS to Hijack an Admin Session
This write-up covers the exploitation process of a client-side vulnerability in the TryHackMe room What's Your
Web Application Pentesting - Exploiting the Modern Web
Over the past few weeks, I’ve worked through the Web Application Pentesting learning path on TryHackMe, a course that
Learning Web Application Pentesting
Currently, in my retraining as an IT specialist for system integration, the official topic is Windows 10. Why, I honestly
Windows Privilege Escalation: A Deep Dive into Gaining Higher Access
Privilege escalation is one of the most crucial phases in penetration testing and red teaming. Gaining initial access to a