Security write-ups

A Linux machine involving XWiki exploitation via CVE-2025-24893, credential extraction, and PATH hijacking for privilege escalation.

A Linux machine involving vhost enumeration, IDOR vulnerability, hash cracking, SSRF exploitation, and binary signing for privilege escalation.

A web application vulnerability challenge focusing on SSTI (Server-Side Template Injection) and RCE exploitation techniques.

A banking web application challenge involving MongoDB Object ID prediction and JWT token exploitation.

A Python-based web application with command injection vulnerabilities and privilege escalation challenges.

A challenging Hack The Box Linux-based machine involving web exploitation and privilege escalation techniques.

A Linux machine involving git repository dumping, RCE exploitation, and privilege escalation through sudo misconfiguration.

A Linux machine featuring Roundcube webmail exploitation, session decryption, and privilege escalation through log symlink vulnerability.