web-exploitation | Bukhari's Archive

November 13, 2025
Academy — Privilege Escalation & Exploitation Walkthrough (TCM Security)
linux privilege-escalation web-exploitation reverse-shell
Linux machine compromise via FTP anonymous access and web CMS exploitation, followed by privilege escalation through cron misconfiguration leading to root access.
Read more →
August 23, 2025
Nibbles Machine (HackTheBox) — Step-by-Step Walkthrough
linux hackthebox easy file-upload reverse-shell metasploit sudo-exploitation privilege-escalation web-exploitation
Compromise of a Linux HackTheBox machine running Nibbleblog 4.0.3, exploited through default credentials and an authenticated file upload vulnerability to gain a reverse shell, followed by privilege escalation by abusing a world-writable sudo script.
Read more →

Academy — Privilege Escalation & Exploitation Walkthrough (TCM Security)