Internal - WordPress, Jenkins, and Docker All the Way to Root
The TryHackMe room "Internal" is a very good example of how realistic attack chains are built during internal
Tag
Olympus - SQL Injection, an Overlooked Chat App and a Custom SUID Binary to Root
Some TryHackMe rooms teach you one technique and let you drill it until it sticks. Olympus is not one of
Relevant - Chaining SMB, IIS and Token Impersonation into SYSTEM
Windows environments are rarely compromised through a single vulnerability alone. In most real world scenarios, attackers chain together several smaller
Corp Walkthrough - Kerberoasting
This room focuses on several common techniques used during Windows and Active Directory security assessments. The objective is to move
Chained Exploitation on lookup.thm: Web Vuln - SUID - Sudo Bypass
This is a complete walkthrough of the lookup.thm machine, showcasing all stages from reconnaissance to privilege escalation. The box
Simple CTF - Full Walkthrough
This post covers my full approach to the TryHackMe box Simple CTF, a beginner-friendly machine that turned out to
Skynet: SMB Leaks, Squirrelmail, and a Tar Wildcard to Root
I haven't touched TryHackMe or done any structured CTF work in quite a while, so I figured it
Hacking the Game Zone - SQLi, SSH Tunnels, and Root Access
The TryHackMe room Game Zone was a great opportunity to revisit some fundamental offensive techniques in a very streamlined and
HackPark: BlogEngine.NET RCE, Meterpreter, and a Writable Service Binary to SYSTEM
The HackPark room on TryHackMe is a well-structured Windows-based lab that walks through multiple real-world attack techniques:
Starting Offensive Pentesting: Jenkins RCE to SYSTEM on Alfred
After completing the Web Penetration Testing path, I was more than ready for a shift in focus. The Web module
What's Your Name?: Stored XSS to Full Admin Takeover
This write-up covers the exploitation process of a client-side vulnerability in the TryHackMe room What's Your
Web Application Pentesting - Exploiting the Modern Web
Over the past few weeks, I’ve worked through the Web Application Pentesting learning path on TryHackMe, a course that