BugTrails is a weekly CTF challenge hosted by the BugBase community consisting of cash rewards for the top users in the leaderboard. https://bugbase.in/dashboard/competitions — 1. Challenge Name: admin panel The challenge provides us with a website URL. The screenshot for the same is given below. Analyzing the website to understand the tech stack being used on it. PHP is used in the backend which can be identified by looking at the client source code. …

Writeup by Akshay Shinde This challenge falls under the category of Web exploitation. It’s a good challenge to understand how one can manipulate and play with JWTs (Json Web Tokens). What is JWT and how it works ? JSON Web Token (JWT) is an open standard (RFC 7519) that defines a compact and self-contained way for securely transmitting…

Hey fellas, finally the Advent of cyber is here and you guys can play the game at Tryhackme. So, Day 1 is all about Web exploitation and it covers the basics of how the web works. So let’s get started. We got a bunch of questions and these questions are…

Hey guys, this post is about the machine that I recently covered in Tryhackme and is really a good machine to hack into as it covers real world pentesting example and also you will get a idea about how a real pentest environment looks like. …

Write-up by Akshay Shinde CherryBlossom is a boot2root machine on tryhackme. Tryhackme is a great platform for those who want to improve their CTFs skills. Difficulty: Hard In this machine, we gotta submit three flags : Journal flag,user flag and the root flag.Let’s …

Well, the flaw that makes up this box is the reproduction found in the production environment of a customer a while ago, the verification in season consisted of two steps, the last one within the environment, we hit it head-on and more than 15 machines were vulnerable that together with…

Exploit Ubuntu, like a Turtle in a Hurricane 0day is an intermediate boot2root machine on tryhackme and I found this machine to be very interesting to exploit. This machine covers a very important vulnerability and one find it very easy to exploit. Lets start off by scanning and enumerating the…