Vulnlab - Lock
This write-up details the exploitation of a vulnerable environment featuring Microsoft IIS, Gitea, and Remote Desktop services. The objective is to identify and exploit misconfigurations to escalate privileges and gain SYSTEM access.
Tag: reports
Vulnlab - Forgotten
This post details the steps taken to exploit a vulnerable LimeSurvey installation hosted on an Apache web server. The goal was to gain initial access via remote code execution (RCE), escalate privileges inside a Docker container, and ultimately compromise the host system to retrieve the root flag.
Vulnlab - Feedback
This write-up details the exploitation of a vulnerable Apache Tomcat 9.0.56 server, where **Log4Shell** (CVE-2021-44228) is leveraged to achieve a remote shell. Privilege escalation to `root` is achieved using exposed credentials in the `tomcat-users.xml` file.
Vulnlab - Escape
This post details the exploitation of a Windows RDP server with Network Level Authentication (NLA) disabled. The objective was to gain initial access through RDP, evade the Kiosk mode, escalate privileges to the administrator level bypassing UAC, and retrieve the root flag.
Vulnlab - Down
This post details the exploitation of a vulnerable web application allowing Server-Side Request Forgery (SSRF) to gain initial access, followed by privilege escalation to root on a Linux server.
Vulnlab - Data
This post details the exploitation of a vulnerable Grafana instance, from gaining initial access using a path traversal vulnerability to escalating privileges within a Docker container, ultimately achieving root access on the host system.
Vulnlab - Baby
This write-up details the enumeration and exploitation process of a Windows domain controller using LDAP enumeration, password spraying, and privilege escalation via backup operator privileges to achieve `Administrator` access and retrieve the root flag.
Behemoth4
These are the steps taken to solve the Stack Overflow exercises of the Behemoth4 lab.
Behemoth3
These are the steps taken to solve the Stack Overflow exercises of the Behemoth3 lab.
Behemoth2
These are the steps taken to solve the Stack Overflow exercises of the Behemoth2 lab.