THM: Do Not Disturb

Linux boot2root combining a NoSQL authentication bypass, Node.js SSTI, Node inspector abuse, and disk-group privilege escalation.

August 11, 2026 · 7 min

Linux Privilege Escalation Cheatsheet

A practical Linux privilege escalation reference covering high-impact enumeration checks, common misconfigurations, credential hunting, container escapes, and last-resort kernel exploits.

May 25, 2026 · 11 min

HTB: BoardLight

Linux machine where vhost discovery uncovers an authenticated Dolibarr RCE, followed by credential disclosure and Enlightenment SUID privilege escalation.

February 18, 2026 · 4 min

VulnLab: Sync

Linux machine reached through anonymous rsync access, cracking a salted MD5 hash, planting an SSH key via FTP, reusing a password, and abusing a cronjob for root.

May 13, 2025 · 5 min