Internal TryHackMe writeup — WordPress brute force, a theme-editor reverse shell, SSH tunneling into a Jenkins container, and a cracked bcrypt hash leading to root.

#TryHackMe #Internal #Web Exploitation #WordPress #WPScan #Jenkins #Privilege Escalation #Boot2Root

2026-08-30Medium

Jump - TryHackMe Writeup

Room

Jump TryHackMe writeup — anonymous FTP upload abuse, a cron-run recon pipeline, group-membership pivots and pspy enumeration to hop from recon_user up the stack.

#TryHackMe #Jump #Privilege Escalation #FTP #Cron Jobs #pspy #Boot2Root

2026-08-30Easy

Operation Coldstart - TryHackMe Writeup

Room

Operation Coldstart TryHackMe writeup — SSRF against a localhost-gated admin route, leaked SSH credentials, and GNU tar wildcard injection for root.

#TryHackMe #Operation Coldstart #SSRF #FTP #Cron Jobs #GNU Tar Wildcard #Privilege Escalation #Boot2Root

2026-08-30Medium

Recruit - TryHackMe Writeup

Room

Recruit TryHackMe writeup — LFI via a CV-fetch endpoint, exposed config credentials, and UNION-based SQL injection to escalate from HR to admin.

#TryHackMe #Recruit #Web Exploitation #LFI #SQLi #UNION Injection #PHP #Authentication Bypass

2026-08-30Medium

Silent Monitor - TryHackMe Writeup

Room

Silent Monitor TryHackMe writeup — SQL injection into CorpNet's NOC portal, newline command injection in a ping probe, leaked service credentials, and a cracked KeePass vault leading to root.

#TryHackMe #Silent Monitor #Web Exploitation #SQLi #Command Injection #KeePass #John The Ripper #Privilege Escalation #Boot2Root

2026-08-30Easy

Support - TryHackMe Writeup

Room

Support TryHackMe writeup — Hydra password spray, a skin parameter LFI, cookie tampering into the internal API, IDOR user enumeration and command injection for the flags.

#TryHackMe #Support #Web Exploitation #LFI #IDOR #Command Injection #Hydra #PHP #Authentication Bypass

2026-08-30Medium

Year of the Dog - TryHackMe Writeup

Room

Year of the Dog TryHackMe writeup — SQL injection through a queue-number cookie, hex-encoded webshell written via INTO OUTFILE to bypass a case-sensitive WAF, and PwnKit for root.

#TryHackMe #Year of the Dog #Web Exploitation #SQLi #UNION Injection #WAF Bypass #Privilege Escalation #SUID #PwnKit

2026-08-30Medium

Year of the Fox - TryHackMe Writeup

Room

Year of the Fox TryHackMe writeup — Basic auth bruteforce, Samba user enumeration, JSON escaping into command injection on a search endpoint, and PwnKit for root.

#TryHackMe #Year of the Fox #Web Exploitation #Brute Force #SMB #Command Injection #Privilege Escalation #SUID #PwnKit

2026-08-30Medium

Year of the Owl - TryHackMe Writeup

Room

Year of the Owl TryHackMe writeup — SNMP community-string enumeration to find the Jareth user, Hydra against WinRM, and SAM/SYSTEM hive backup dumps for the admin flag.

#TryHackMe #Year of the Owl #SNMP #Windows #Hydra #Evil-WinRM #SAM #Hash Cracking #Privilege Escalation

2026-08-30Medium

Year of the Pig - TryHackMe Writeup

Room

Year of the Pig TryHackMe writeup — CeWL wordlist generation and MD5 bruteforce of a plane-lover's blog, tampered command endpoint to dump the user DB, and a sudoedit wildcard/symlink trick for root.

#TryHackMe #Year of the Pig #Web Exploitation #Brute Force #CeWL #MD5 #Password Reuse #Sudoedit #Privilege Escalation

2026-02-04Medium

Smag Grotto - TryHackMe Writeup

Room

Smag Grotto - TryHackMe Writeup

#TryHackMe #CTF #Boot2Root #Web Enumeration #PCAP #Blind RCE #Privilege Escalation #Cron #SSH Key Injection #GTFOBins

2026-02-04Medium

Valley - TryHackMe Writeup

Room

Valley - TryHackMe Writeup

#TryHackMe #CTF #Boot2Root #Web Enumeration #FTP #PCAP #UPX #Privilege Escalation #Python Hijacking #Cron

2026-01-30Easy

Operation Slither - TryHackMe Writeup

Room

Operation Slither TryHackMe writeup — OSINT username correlation across X, Threads, Instagram, SoundCloud and GitHub to unmask three operators of Sneaky Viper.

#TryHackMe #Operation Slither #OSINT #Username Enumeration #Social Media Intelligence #Base64

2026-01-26Easy