tryhackme - The Okayest Pentester

TryHackMe: Kenobi

Oct 27, 2024 13 min read tryhackme

Kenobi involves accessing an open Samba share and abusing a vulnerable version of ProFtpd to get a foothold on the machine, and then abusing a SUID binary to elevate privileges to root.

TryHackMe: Include

Oct 23, 2024 11 min read tryhackme

This subscription room involves abusing a logic flaw to get access to an admin panel, leveraging an internal API to obtain credentials, and then achieving RCE on a web server.

TryHackMe: Annie

Oct 21, 2024 5 min read tryhackme

This machine involved compromising a vulnerable AnyDesk installation and then abusing an uncommon SetUID binary to elevate privileges to root.