Welcome to my cybersecurity blog, where I share detailed hacking reports, practical cheat sheets, and comprehensive step-by-step penetration testing write-ups. Whether you are a beginner or an experienced professional, you'll find valuable insights, methodologies, and tools gained from real-world labs, vulnerability assessments, and certification challenges like OSCP and more. Dive into my journey to learn and improve your skills!
Take your time to explore the reports, reviews and articles below. And if you're curious to learn more about the person behind the articles on this blog, visit my About Me page.
This post details the steps followed during the exploitation of a machine in a penetration testing lab. The process covers initial reconnaissance, enumeration, exploitation, and privilege escalation to achieve full control over the target system.
This write-up documents the exploitation of a simulated Active Directory (AD) environment in a practice lab. The goal was to identify vulnerabilities and escalate privileges to the domain administrator level while leveraging various enumeration, exploitation, and post-exploitation techniques.
This write-up covers the exploitation of a vulnerable Ubuntu-based environment featuring Java RMI, Apache Tomcat, and OpenSSH services. The goal is to identify misconfigurations, gain initial access, and escalate privileges to the root user.
This write-up details the exploitation of a vulnerable environment featuring Microsoft IIS, Gitea, and Remote Desktop services. The objective is to identify and exploit misconfigurations to escalate privileges and gain SYSTEM access.
This post details the steps taken to exploit a vulnerable LimeSurvey installation hosted on an Apache web server. The goal was to gain initial access via remote code execution (RCE), escalate privileges inside a Docker container, and ultimately compromise the host system to retrieve the root flag.
This write-up details the exploitation of a vulnerable Apache Tomcat 9.0.56 server, where **Log4Shell** (CVE-2021-44228) is leveraged to achieve a remote shell. Privilege escalation to `root` is achieved using exposed credentials in the `tomcat-users.xml` file.
This post details the exploitation of a Windows RDP server with Network Level Authentication (NLA) disabled. The objective was to gain initial access through RDP, evade the Kiosk mode, escalate privileges to the administrator level bypassing UAC, and retrieve the root flag.
This post details the exploitation of a vulnerable web application allowing Server-Side Request Forgery (SSRF) to gain initial access, followed by privilege escalation to root on a Linux server.
This post details the exploitation of a vulnerable Grafana instance, from gaining initial access using a path traversal vulnerability to escalating privileges within a Docker container, ultimately achieving root access on the host system.
This write-up details the enumeration and exploitation process of a Windows domain controller using LDAP enumeration, password spraying, and privilege escalation via backup operator privileges to achieve `Administrator` access and retrieve the root flag.