Writeups

xomnibot@lab:~/writeups$

// writeups

CTF and lab walkthroughs across TryHackMe, Hack The Box, PortSwigger, and more.

3 writeups

TryHackMe: Pickle Rick Walkthrough

A Rick and Morty themed CTF challenge requiring web reconnaissance, unauthenticated command injection exploitation, and sudo privilege escalation to retrieve all three secret ingredients.

#web#command-injection#privilege-escalation

Aug 5, 20261 min read

HardPortSwigger

PortSwigger OAuth 2.0 Account Takeover

Exploiting unvalidated redirect URIs and implicit grant token leaks to achieve pre-auth account takeover.

#OAuth 2.0#JWT#Account Takeover

Aug 1, 20261 min read

HardActive Directory

Active Directory Attack Chain: AS-REP Roasting to DCSync

Full attack path from unauthenticated AS-REP roasting to BloodHound ACL traversal and DCSync domain compromise.

#Kerberos#AS-REP Roasting#BloodHound

Jul 20, 20261 min read