Write Ups

Boxes, labs, research & notes.

SSRF localhost bypass, internal port scan, status endpoint vhost leak, marimo RCE, Pack2Root.

Handlebars SSTI RCE, ligolo-ng pivot, SSPI Gitea, runner hijack, ksu root, cross-realm DCSync.

pdfminer.six pickle RCE, internal Vite LFI, leaked SSH key, torch.load checkpoint deserialization.

LPD printer shell injection, PJL path traversal, SSH key drop, SCM_RIGHTS fd leak from root daemon.

Stored XSS session hijack, WP theme editor RCE, credential reuse, internal OCR service arbitrary file write.

Leaked .env creds, Krayin CRM RCE, DB password reuse, gitea template-sync path traversal, root SSH key.

Craft CMS preauth RCE, env leak, DB hash crack, loopback telnetd 2.7 login bypass.

NFS share mining, mail credential reuse, web app RCE, database hash cracking, command injection into web actions.

SSRF & IP obfuscation, AWS misconfiguration, unsafe YAML deserialization, container & kernel escape.

AD DACL abuse, deleted object restoration, malicious VSIX extension, Kerberos DMSA impersonation, memory forensics.

SMB & print subsystem exploitation, credential decryption, share misconfiguration, polkit abuse.

Application exploitation, credential cracking, local port forwarding, debug protocol RCE.