-
xRDP Setup and Configuration
Installing xRDP, configuring Polkit rules and fixing the default theme.
-
Library
Brute forcing SSH access and escalating using a poorly configured sudo rule
-
CyberLens
Exploiting Apache Tika 1.17 with MetaSploit and abusing `AlwaysInstallElevated` to escalate to SYSTEM
-
TryHack3M: Bricks Heist
Exploiting Wordpress v1.9.5 (CVE-2024-25600) and blockchain forensics
-
Pyrat
RCE through an open port which executes Python code, finding credentials in a Git config file and brute forcing a Python service
-
Lookup
Using FFUF to brute force a user name and password and abusing a binary to read files as root
-
The Sticker Shop
Basic XSS in through a form
-
LinkVortex
Finding a dev subdomain with a git repo, getting credentials from the git repo, abusing a CVE in Ghost CMS to read files and finding more credentials. Getting root through an bash script and a double symlink
-
Whiterose
Vhost fuzzing, Server-side template injection (STTI) for EJS and privilege escalation through sudoedit
-
Cicada
Ldap search for users and smb enum. User has SeBackupPrivilege and SeRestorePrivilege to backup the ntds.dit and system hive
