Latest Blog Posts

Help Writeup - Hack The Box

Exploiting GraphQL endpoint and HelpDeskZ vulnerabilities for initial access, then using a kernel exploit for privilege escalation

Exploiting log poisoning and Rservices for initial access, then abusing a tmux session and nano sudo permissions for privilege escalation

Exploiting SQL injection and password cracking for initial access, then analyzing a binary for privilege escalation

Exploiting SSRF for initial access, then using a GitPython vulnerability for privilege escalation

Exploiting XSS and command injection vulnerabilities for initial access, then abusing sudo privileges for privilege escalation