https://mrbeetrootpwn.com/tags/xxd/Recent content in xxd on CyberSec WriteupsHugoen-usWed, 12 Aug 2026 00:00:00 +0000https://mrbeetrootpwn.com/write-ups/tryhackme/thm-hollowshell/Wed, 12 Aug 2026 00:00:00 +0000https://mrbeetrootpwn.com/write-ups/tryhackme/thm-hollowshell/Web challenge exploiting a ZIP-based asset upload through magic-byte forgery and a Zip Slip path traversal to plant a malicious Gunicorn hook.https://mrbeetrootpwn.com/write-ups/tryhackme/thm-thatstheticket/Fri, 07 Aug 2026 00:00:00 +0000https://mrbeetrootpwn.com/write-ups/tryhackme/thm-thatstheticket/TryHackMe web challenge pairing a stored XSS payload with DNS-based data exfiltration and credential brute forcing to take over an admin account.https://mrbeetrootpwn.com/write-ups/hackthebox/htb-magic/Thu, 19 Feb 2026 00:00:00 +0000https://mrbeetrootpwn.com/write-ups/hackthebox/htb-magic/Linux machine bypassing a SQL injection login, forging magic bytes to upload a PHP webshell, and hijacking a SUID binary’s relative-path lshw call for root.https://mrbeetrootpwn.com/write-ups/hackthebox/htb-networked/Sat, 17 Jan 2026 00:00:00 +0000https://mrbeetrootpwn.com/write-ups/hackthebox/htb-networked/Linux machine bypassing MIME-based upload filters with forged magic bytes, exploiting an unsanitised filename in a cron job, then a network config script’s variable-parsing quirk for root.https://mrbeetrootpwn.com/write-ups/hackthebox/htb-pilgrimage/Sun, 16 Nov 2025 00:00:00 +0000https://mrbeetrootpwn.com/write-ups/hackthebox/htb-pilgrimage/Linux machine exploiting an ImageMagick arbitrary file read (CVE-2022-44268) to recover a SQLite credential database, then a binwalk RCE (CVE-2022-4510) triggered via a monitored upload folder for root.