- blog
- 5+ Note
- Focus
- OSCP · Red Team
- Structure
- Recon → Exploit
Easy blog
Filters
Recon & mappingWalkthroughs
HTB, PG, and similar machines explained as personal notes: commands, important output, and reasoning, no fluff.
Discover more Discover more
toolsNessus: Complete Guide to Scanning, Installation, and Vulnerabilities
Nessus Guide: Installation, Nessus Essentials, vulnerability scans, credentialed scans, policies, tuning, and reporting. The complete vulnerability assessment workflow.
Discover more Discover more
walkthroughsTryHackMe Bolt: Complete Walkthrough (RCE on Bolt CMS)
Write-Up of TryHackMe's Bolt machine: enumeration, credential discovery, RCE authenticated to Bolt CMS via session hijacking and privesc to root.
Discover more Discover more
walkthroughsHTB Help Walkthrough: GraphQL and File Upload HelpDeskZ
Complete Hack The Box: Help write-up. GraphQL enumeration, bypass file upload to HelpDeskZ with vulnerable PHP code analysis, privesc kernel to root.
Discover more Discover more
walkthroughsHTB Love Walkthrough: SSRF, SQLi Time-Based and Privesc
Write-Up HTB Love, Easy VM: SQLi time-based, NTLM attempt on Responder, SSRF towards 5000, and privesc with AlwaysInstallElevated. Every dead end explained.
Discover more Discover more
