TryHackMe Compiled Challenge – Writeup
This writeup shows how to solve the TryHackMe challenge “Compiled”, by extracting the flag from the strings of a compiled program
This writeup shows how to solve the TryHackMe challenge “Compiled”, by extracting the flag from the strings of a compiled program
In this post, we solve the Lazy Admin CTF from TryHackMe by exploiting 2 CVE of SweetRice CMS and a sudo misconfiguration to get root.
whatweb is a Linux pentesting tool that detects the technologies and frameworks of websites: HTTP servers, CMS like Wordpress, Javascript, etc.
Pickle Rick is a very easy TryHackMe CTF. We complete it by accessing a web portal, getting a reverse shell and exploiting sudo to become root.
Detailed writeup of TryHackMe Neighbour room, where we exploit IDOR to display the admin profile and find the flag of the room.
c4ptur3-th3-fl4g is a beginner level TryHackMe room where we decode 10 flags, then use spectrogam, steganography and obscurity.
Pyrat is an easy TryHackMe challenge where we exploit a Python code execution and use a .git folder to further compromise the server.
Conversor is an easy linux Hack THe Box machine, where we exploit XSLT injection to get a shell and use a needrestart CVE to get root access
ReactOOPS is a very easy challenge on Hack The Box, designed to teach us how to exploit the recent React2Shell (CVE-2025-55182).
This writeup solves Dig Dug, an easy Try Hack Me DNS server exploitation. We must translate givemetheflag.com to get the flag!