TryHackMe Anonymous writeup — anonymous FTP access, cron job hijacking for a reverse shell foothold, and privilege escalation to root via the PwnKit (CVE-2021-4034) pkexec exploit.

TryHackMe Annie — AnyDesk 5.5.2 RCE (CVE-2020-13160), SSH key cracking with John, and privesc via cap_setuid on python3.

TryHackMe Internal writeup — WordPress XML-RPC brute force, Theme Editor RCE, SSH pivoting, and Jenkins Script Console exploitation to root.

TryHackMe HackerNote writeup — timing-attack user enumeration, Hydra password brute-forcing, and privilege escalation via CVE-2019-18634 (sudo pwfeedback buffer overflow).

TryHackMe Kiba writeup — exploiting Kibana 6.5.4 via CVE-2019-7609 RCE for a reverse shell, then privilege escalation to root using Linux capabilities (cap_setuid) on a custom Python3 binary.

TryHackMe Tech_Supp0rt1 writeup — SMB share leaks, Subrion CMS RCE exploit, WordPress config credential recovery, and privilege escalation via a NOPASSWD iconv sudo rule (GTFOBins).

TryHackMe Kenobi writeup — SMB and NFS enumeration, ProFTPD file-copy exploit to steal an SSH key, and privilege escalation via PATH hijacking on a SUID binary.

A practical lab walkthrough demonstrating DNS spoofing using Ettercap in a controlled environment.