Pinned Loading

1. DC-1_Vulnhub_Walkthrough DC-1_Vulnhub_Walkthrough Public

   VulnHub DC-1 boot2root — unauthenticated RCE via Drupalgeddon2 (CVE-2018-7600) to SUID find privilege escalation, with severity-rated findings and remediation.

2. MrRobotCTF-Walkthrough MrRobotCTF-Walkthrough Public

   Mr. Robot CTF on TryHackMe — WordPress enumeration and XML-RPC credential attack to Theme Editor RCE, MD5 cracking for lateral movement, and SUID nmap privesc to root.

3. Attacktive-Directory-Walkthrough Attacktive-Directory-Walkthrough Public

   Full Active Directory attack chain on TryHackMe's Attacktive Directory — Kerbrute user enum, AS-REP Roasting, DCSync, and Pass-the-Hash to Domain Admin.

4. BasicPentesting-THM-Walkthrough BasicPentesting-THM-Walkthrough Public

   Basic Pentesting on TryHackMe — gobuster/enum4linux recon, Hydra SSH brute-force, and cracking a world-readable id_rsa with ssh2john to pivot and escalate.

5. TryHackMe-Anonymous-Walkthrough TryHackMe-Anonymous-Walkthrough Public

   Linux privilege escalation on TryHackMe's Anonymous — anonymous FTP/SMB to RCE via a cron-executed world-writable script, then SUID env to root. Includes a full findings & remediation report.