Bukhari's Archive https://b3ta-blocker.github.io/blog A hands-on hacking blog covering penetration testing walkthroughs by Hassaan Ali Bukhari. en-us root.b3ta.blocker@gmail.com (Hassaan Ali Bukhari) root.b3ta.blocker@gmail.com (Hassaan Ali Bukhari) Sun, 07 Dec 2025 00:00:00 GMT https://b3ta-blocker.github.io/blog/blackpearl Blackpearl Machine (TCM Security) — Step-by-Step Walkthrough https://b3ta-blocker.github.io/blog/blackpearl Compromise of a Linux machine via DNS reconnaissance to discover a virtual host running Navigate CMS v2.8, exploited through an unauthenticated RCE vulnerability, followed by privilege escalation via a SUID misconfiguration on php7.3. Sun, 07 Dec 2025 00:00:00 GMT root.b3ta.blocker@gmail.com (Hassaan Ali Bukhari) linuxeasyvirtual-hostsuidprivilege-escalation