CTF Writeups
HTB Mirai: Default Creds, Pi-hole & USB Forensics
Raspberry Pi default credentials on a Pi-hole device for initial access, then recovering the deleted root flag from a USB drive using Linux forensics.
Articles
CTF Writeups
HTB Shocker: RCE via CGI-bin + Perl Privesc
Shellshock (CVE-2014-6271) exploitation through CGI-bin scripts for remote command execution, then root via Perl sudo privilege escalation.
AI Security
Cross-Detector Inconsistency in AI Text Detection: A Benchmark Study with Hybrid Evasion Techniques
Research analyzing how AI text detection tools disagree when facing hybrid evasion techniques. Cross-detector benchmark with paraphrasing and stylistic manipulation.
CTF Writeups
HTB Sense: Hacking The Firewall
Directory bruteforcing pfSense firewall to discover admin credentials, then exploiting CVE-2014-4688 for remote command execution as root.
CTF Writeups
HTB Arctic: Remote Command Execution to JuicyPotato Privesc
Adobe ColdFusion 8 directory traversal and file upload for RCE, then SYSTEM access via JuicyPotato on Windows Server 2008.
CTF Writeups
HTB Return: LDAP Credential Theft to Service Hijacking
Abusing a printer admin panel to intercept LDAP credentials via netcat listener, then escalating privileges through Windows service configuration hijacking.