By Mawira Vic,

Platform: TryHackMe Room: RootMe Difficulty: Easy Category: Web, Privilege Escalation

🔎 1. Recon

ROOM TYPE

🔎 1. Recon

The Silent Gateway Between You and the Machine

TryHackMe: h4cked — Someone Was Already Inside A .pcap file tells the whole story. All you have to do is read it. Most rooms ask you to break in. This one hands you the evidence and asks: can you …

First things first, lets analyse the target with nmap:

Most pentesters or OffSec students are familiarized with inbound SQLi. Those are the kind of injections that give the user some text back…

From deobfuscating JS code to root ‘CVE-2023–0386’

Use privilege escalation knowledge to jump from a normal user to root.

Popping Shells: When servers become puppets!

The beachside guest-experience build shipped on a deadline, and the night-shift developer wired the “jukebox straight into the floor with…

Concierge Briefing

Attacking Google Cloud — Part 2 / 7

Attackers rarely connect to a hacked machine, the hacked machine connects to them instead

At a Glance Malware family PHP web shells, a Perl web shell installer, Platypus agents, and a Python reverse shell Threat actor Four unnamed clusters; one uses a tool tied to China-nexus actors (s…

If you’ve ever caught a reverse shell with nc -lvnp 4444, you know the pain that follows: no tab completion, no arrow keys, the shell dies…