Welcome to the Team writeup! This TryHackMe room by dalemazza is an easy-rated box that chains together FTP credential leakage, Local File Inclusion (LFI), and crontab abuse to achieve root access....

Welcome to the Tomghost writeup! This TryHackMe room exploits Apache Ghostcat (CVE-2020-1938) - a critical vulnerability in the AJP connector of Apache Tomcat that allows an attacker to read arbitr...

Welcome to the Tech_Supp0rt: 1 walkthrough! This room is a great example of a multi-stepped attack path, starting from simple enumeration to exploiting a CMS and eventually abusing a misconfigured ...

Welcome back! Today we’re taking on the Biblioteca room on TryHackMe. This room provides a great sequence of common exploitation techniques: from a simple web vulnerability to a slightly more advan...

Welcome back! Today we’re diving into the Farewell room on TryHackMe. This one is a fun challenge that focuses heavily on web application security, specifically dealing with Web Application Firewal...

A boot2root challenge from BSides Guatemala CTF - discovering usernames through reconnaissance and exploiting sudo misconfigurations.

A Services based room, extracting information from HTTP Services and finding the hidden messages.

Welcome to Beacon Mental Hospital. Help Sebastian and his team withstand the dangers that lie ahead in this Evil Within-themed CTF.

A medium box where you exploit a vulnerable AnyDesk service, crack an SSH key, and escalate to root using misconfigured capabilities.

An easy box where you exploit a vulnerable image gallery to gain access and escalate to root.