Skynet Writeup - TryHackMeThis is a writeup for the Skynet room, available on the TryHackMe. Today we will see privilege escalation using wildcard injection: crafting manipulated filenames, an attacker can insert parameters into commands that are run by other users, such as t...May 7, 2022·3 min read·296
Dogcat Writeup - TryHackMeThis is a writeup for the Dogcat room, available on TryHackMe. Log Poisoning is a well-known method for exploiting a Local File Inclusion (FLI) vulnerability to gain a reverse shell. The attacker attempts to insert malicious input into the server lo...May 1, 2022·5 min read·579
Relevant Writeup - TryHackMeThis is a writeup for the Relevant room, available on TryHackMe. Today's system vulnerability is based on Token Impersonalization. In order for this to work, we need a tool that uses a named pipe to deceive an NT AUTHORITY\SYSTEM account into connect...Apr 24, 2022·3 min read·622
What is Going on in Cybersecurity?A high-level overview of cybersecurity terminologyApr 21, 2022·4 min read·67