THM: Do Not Disturb
Linux boot2root combining a NoSQL authentication bypass, Node.js SSTI, Node inspector abuse, and disk-group privilege escalation.
Linux boot2root combining a NoSQL authentication bypass, Node.js SSTI, Node inspector abuse, and disk-group privilege escalation.
A practical Linux privilege escalation reference covering high-impact enumeration checks, common misconfigurations, credential hunting, container escapes, and last-resort kernel exploits.
Linux machine where vhost discovery uncovers an authenticated Dolibarr RCE, followed by credential disclosure and Enlightenment SUID privilege escalation.
Linux machine reached through anonymous rsync access, cracking a salted MD5 hash, planting an SSH key via FTP, reusing a password, and abusing a cronjob for root.