Skip to content
pentestguides.com
  • CTF & Bug Bounty
    • Bug Bounty
      • Bug Bounty Cheatsheets
      • My Bug Bounty Experience
    • Hack The Box
      • HTB Machines
      • HTB Challenges
    • TryHackMe
      • THM Challenges
  • Pentest Methodology
    • Pentest Tools
      • Networking
      • Password Attacks
      • Web
  • Fundamentals
    • Linux Commands
  • Dev & Scripting
    • Coding Challenges
      • Code Golf Cheatsheet
      • Breaking Browser Games
      • Clash of Code
  • Toolbox

php

Solving Lookup – TryHackMe Challenge Writeup

February 16, 2026February 12, 2026 by pentestguides
Lookup TryHackme cover image

Complete walkthrough of Lookup room on TryHackMe: form brute-forcing, elFinder CVE and 2 Linux misconfigurations lead us to the root flag.

Categories TryHackMe Challenge Tags ctf, curl, ffuf, hydra, linux, nmap, path hijacking, php, python, reverse shell, ssh, sudo, suid, tryhackme, web Leave a comment

RootMe Writeup – Full TryHackMe CTF Solution

February 16, 2026February 8, 2026 by pentestguides
TryHackMe RootMe room official image

Full walkthrough of RootMe: reconnaissance, getting a PHP shell then a reverse shell, and elevating our privileges through a SUID misconfiguration

Categories TryHackMe Challenge Tags apache, ctf, ffuf, find, gobuster, nmap, php, privesc, privilege escalation, reconnaissance, reverse shell, suid, tryhackme, web, web shell Leave a comment

Lo-Fi Writeup on TryHackMe – File Inclusion

February 16, 2026February 6, 2026 by pentestguides
Lo-Fi TryHackMe official image

This writeup covers the solution of Lo-Fi room on TryHackMe. A PHP File Inclusion along with path traversal allow us to read the flag.

Categories TryHackMe Challenge Tags arbitrary file read, ctf, file inclusion, lfi, path traversal, php, tryhackme, web Leave a comment

TryHackMe “Agent T” Writeup – Easy Challenge

February 16, 2026February 4, 2026 by pentestguides
TryHackMe Agent T official image

Writeup of TryHackMe challenge “Agent T”. We exploit the backdoored version of PHP 8.1.0-dev to get Code Execution and read the flag.

Categories TryHackMe Challenge Tags backdoor, backdoored php, ctf, nc, nmap, php, reverse shell, tryhackme, web Leave a comment

Lazy Admin Writeup – TryHacKme Challenge

February 15, 2026February 2, 2026 by pentestguides
Lazy Admin TryHackMe Challenge

In this post, we solve the Lazy Admin CTF from TryHackMe by exploiting 2 CVE of SweetRice CMS and a sudo misconfiguration to get root.

Categories TryHackMe Challenge Tags cms, ctf, ffuf, mysql, nmap, php, reverse shell, sql, sudo, sweetrice, tryhackme, web Leave a comment

whatweb Tutorial: Identify Website Technologies

January 31, 2026January 31, 2026 by pentestguides
Whatweb - Linux Web Pentesting tool

whatweb is a Linux pentesting tool that detects the technologies and frameworks of websites: HTTP servers, CMS like Wordpress, Javascript, etc.

Categories Pentest Tools - Web Tags cms, ctf, http headers, http server, joomla, linux, pentesting, php, web, whatweb, wordpress Leave a comment

Pickle Rick Writeup – Easy TryHacKme CTF

February 16, 2026January 29, 2026 by pentestguides
TryHackMe Pickle Rick CTF image

Pickle Rick is a very easy TryHackMe CTF. We complete it by accessing a web portal, getting a reverse shell and exploiting sudo to become root.

Categories TryHackMe Challenge Tags ctf, curl, ffuf, find, html, nc, php, python, reverse shell, sudo, tryhackme, web Leave a comment

Neighbour Writeup – Easy IDOR TryHacKme Challenge

February 16, 2026January 28, 2026 by pentestguides
TryHackMe Neighbour room

Detailed writeup of TryHackMe Neighbour room, where we exploit IDOR to display the admin profile and find the flag of the room.

Categories TryHackMe Challenge Tags ctf, curl, idor, php, tryhackme, web Leave a comment

Knife Walkthrough – HTB Easy Machine

February 16, 2026January 14, 2026 by pentestguides
Knife machine on Hack The Box - Easy Linux CTF

Complete and detailed walkthrough of the easy machine “Knife” on HackTheBox.

Categories Hack The Box Machine Tags backdoor, ctf, hackthebox, nmap, php, sudo, web Leave a comment
  • scp example command to copy a remote filescp Quick Tutorial – Transfer Files Securely Over SSH
    February 17, 2026
  • downloading a file with curlcurl Quick Tutorial – Everything You Need to Know
    February 16, 2026
  • nmap results running a NSE scriptnmap Tutorial – the Ultimate Network Scanner
    February 14, 2026
  • Corridor TryHackMe official imageCorridor Writeup – TryHackMe IDOR Challenge
    February 7, 2026
  • Golf cart icons created by Smashicons - FlaticonCode Golf Cheatsheet
    January 24, 2026
  • TryHackMe Agent T official imageTryHackMe “Agent T” Writeup – Easy Challenge
    February 4, 2026
  • Mines reveald on the minesweeperBreaking Google Minesweeper by Revealing the Mines
    January 24, 2026

arbitrary file read backdoor binary brute forcing bug bounty bug bounty cheatsheet clash of code cms code golf ctf curl dns ffuf file transfer find ftp hackerone hackthebox hydra idor intigriti kali linux linux linux command nc nmap penetration testing pentest pentesting php privilege escalation python reconnaissance reverse shell scp sftp smb ssh sudo suid tcp tls tryhackme udp web

Legal notice
Privacy policy
Ethical Disclaimer & Terms of Use
About Us
Contact Us

This site is hosted on Hostinger ↗

© 2026 pentestguides.com • Built with GeneratePress