Disclosing Froxlor V2.x Authenticated RCE as Root Vulnerability via PHP-FPM
A story of a vulnerability in Froxlor that allowed authenticated remote code execution as root. This vulnerability exists on the latest version of Froxlor, including v2.x.
Sarper AVCI
IronShade Write-up - TryHackMe
Performing a compromise assessment on a Linux host and identifying the attack footprints.
Block Write-up - TryHackMe
Extracting NTLM hashes from a memory dump and decrypting SMB3 traffic to find the flag.
Joomify Write-up - TryHackMe
Learning how to exploit CVE-2023-23752 and identify the vulnerability in the Joomla website.
Umbrella Write-up - TryHackMe
Extracting sensitive information from the Docker Registry and exploiting Server-Side Template Injection.
JSON Web Tokens Write-up - CryptoHack
JSON Web Tokens challenges from CryptoHack
Session Management Write-up - TryHackMe
Local Storage manipulation to escalate privileges
Chrome Write-up - TryHackMe
Extracting Chrome credentials that were encrypted with DPAPI.
Profiles Write-up - TryHackMe
Creating a custom profile for Volatility to analyze a memory dump.
APIWizards Breach Write-up - TryHackMe
Investigating a compromised Linux machine.