HTB Writeup – Editor

Posted on 2025-08-03

XWiki RCE (CVE 2025‑24893) & NetDATA Path Hijacking (CVE-2024-32019)

HTB Writeup – Outbound

Posted on 2025-07-13

RCE for Roundcube (CVE‑2025‑49113) & below Privesc (CVE-2025-27591)

Posted on 2025-05-05

CVE-2024-52301 to alter Laravel environment and Linux ENV injection

Posted on 2025-04-07

Exploit GoPhish Webhook using n8n, and the Restic Backup Utility

Posted on 2025-03-02

APOC Reversing and Cypher Injection with Java-based application

Posted on 2025-02-11

From NTLM to Kerberos Relaying Attack, Spoofing UPNs to privesc

Posted on 2025-01-20

Exploit open-source C2s: Havoc (CVE-2024-41570) & Hardhat

Posted on 2024-12-08

Exploit Ghost CMS 5.58.0 CVE-2023-40028 after a Git leak

Posted on 2024-12-07

Zabbix CVE-2024-36467 (JSON RPC IDOR) & CVE-2024-42327 (SQLi)

Posted on 2024-08-05

Active Directory in Linux? Abuse SSH CA signing