#privilege-escalation

VulnBank: Using Exposed API Docs and Weak Reset Logic to gain Superadmin Access

Exposed API endpoints are often the starting point for dangerous information leaks. In this write-up, I will demonstrate how a weak…

Sunset: Dawn — VulnHub Walkthrough

https://download.vulnhub.com/sunset/dawn.zip

Linux Privilege Escalation

sudo -l :

Lookup: TryHackMe CTF Walkthrough

Easy level Tryhackme CTF challenge to test your enumeration, basic exploitation and Privilege Escalation skills

Snowy ARMageddon (THM) Tryhackme Hard Challenge

Description : Assist the Yeti in breaching the cyber police perimeter!

HTB Touch Writeup

Challenge Scenario

TryHackMe — Library Walkthrough

Introduction

THM: Daily Bugle

I know, I know… it has been quite a while since my last walkthrough! Apologies for the long break, but I’m excited to be back and share…

Windows PrivEsc: Hunting Stored Credentials

Part 3 of the Windows Privilege Escalation series

RoguePlanet: From Defender to Attacker

I know, I know. I am four days late to write about this.

TwoMillion-Machine — writeup

From deobfuscating JS code to root ‘CVE-2023–0386’

Windows Jump CTF walkthrough

A routine vulnerability scan flagged a Windows machine on the internal network; nothing alarming on the surface, just a standard…

Peak Hill (THM) Tryhackme Walkthrough Medium Challenge

Description : Exercises in Python library abuse and some exploitation techniques

TryHackMe Walkthrough: RootMe Room (Web Exploitation + Privilege Escalation)

Part 4 of the “Hacking from Zero” series

Lunizz CTF (THM) Tryhackme Medium Challenge Walkthrough

Description : Lunizz CTF

The Unfinished Questions

A conversation on purpose, love, privilege, commitment, procrastination, cosmos, and everything that refuses to stay quiet.

CU CTF — Can You Reg? — Challenge Write-Up

Target: https://fx-cu-web-can-you-reg.chals

Ollie (THM) Tryhackme Medium Challenge

Description : Meet the world’s most powerful hacker dog!

[ATTACK 2] I Escaped a Privileged Kubernetes Container — Here’s What Falco Saw

Build Log: Project 1 — K8s SOC Foundation | Attack 2 of 4

Road (THM) Tryhackme Medium Challenge

Description : Inspired by a real-world pentesting engagement

Lockdown (THM) Tryhackme Medium Challenge

Description : Stay at 127.0.0.1. Wear a 255.255.255.0.

harder (THM) Tryhackme Medium Challenge

Description : Real pentest findings combined

A short story about becoming a root on THM challange or how to abuse LD_PRELOAD misconfiguration to…

Privilege escalation typical check

24 Characters to Super Admin

I was testing this application where the user’s can ask questions and the Super admins, Admins and other user’s can answer on a blog…

HTB Oopsie-Full Walkthrough

HackTheBox | Linux | CTF| Web App|PenTesting · Privilege Escalation

CVE-2026–46300: Fragnesia Walkthrough Notes | TryHackMe

Using kernel memory flaw to gain full system access step by step

0day Room — TryHackMe CTF Writeup | Shellshock & Kernel Exploit

From a taunting robots.txt to root — a classic vulnerability chain

Drenaje Pluvial a Gran Escala: Ingeniería, Logística y Seguridad en Acción.

La construcción de sistemas de drenaje pluvial en zonas mineras no es solo un reto técnico: es una demostración de capacidad logística…

Windows Privilege Escalation, Modern Comprehensive Guide (Part I)

Windows is the most prominent and most targeted Desktop Operating System on the planet.

Proving Grounds Practice Workaholic

Enumeration: Nmap scan revealed three open ports

(Copy Fail) Linux Kernel Local Privilege Escalation Vulnerability

Copy Fail: A New Linux Kernel Vulnerability Ubuntu Users Should Not Ignore

Silver Platter: A Red Team Journey Through Misconfiguration Hell

A TryHackMe CTF Walkthrough

Walkthrough: Understanding Path Interception and Its Risks in Code Execution

In this project, I demonstrate how a path‑interception vulnerability can be exploited. Path interception occurs when code relies on…

PicoCTF “Sudo Make Me a Sandwich” Writeup — Privilege Escalation Explained

When you start the instance, you’ll see the connection details provided by PicoCTF.

Walkthrough: Understanding the Security Risks of Misconfigured Sudo in Linux ⚠️

In this project, I’ll be demonstrating some ways the Linux sudo utility can be exploited if it is not properly configured. Sudo is the tool…

$2,150 Critical Authorization Bypass: Viewer to Admin Privilege Escalation via API

Hi Everyone! While testing a SaaS platform (let’s call it ExampleCenter), I discovered a critical Broken Access Control vulnerability that…

🔥 DC-4 Walkthrough (Proving ground-play-OSCP)

By cyber_public_school | Cyber Security Researcher

Windows Security Descriptors

Every time a process touches a file, opens a registry key, or talks to a service, Windows asks one question: does this caller have…

Anonymous — TryHackMe Walkthrough FTP Anonymous Login to Root via SUID env

ROOM TYPE Difficulty → Easy Platform → TryHackMe Focus → FTP Enumeration, Cron Job Exploitation, SUID Privilege Escalation

The Art of Privilege Escalation

$800 Bounty: Privilege Escalation via API — From Scheduler to Team Admin

Kioptrix: Level 3 — VulnHub Walkthrough LotusCMS RCE to Root via Sudoers Manipulation

ROOM TYPE Difficulty → Beginner/Intermediate Platform → VulnHub Focus → CMS Exploitation, Database Enumeration, Privilege Escalation

The Day Sam Altman Was Attacked Again (While NSA Deployed Blacklisted Mythos)

April 20, 2026 — forty-three days after Nvidia abandoned OpenAI, thirty-nine days after Karpathy dropped Autoresearch, six days after…

Kioptrix: Level 1 — VulnHub Walkthrough OpenFuck Apache Exploit to Root via ptrace/kmod

ROOM TYPE Difficulty → Beginner Platform → VulnHub Focus → Apache Exploitation, Local Privilege Escalation

Lunizz CTF | TryHackMe | Walkthrough

Initial Access

[BAC] Improper Authorization in Public Facebook Groups

While testing access control mechanisms in Facebook Groups, I started with a simple assumption: each role should have clearly defined…

ADCS ESC[1–9] Attacks

Heyy Guyss, If you’ve ever gone down the Active Directory rabbit hole, you know it never ends — and ADCS (Active Directory Certificate…

NEW: From Low Privilege to Root — Exploiting Snapd (CVE-2026–3888) on Ubuntu

Imagine your Linux system has two helpful tools that normally work great together:

Controlling an Android Device Without Root or Accessibility Services

The Permission Wall

SUDO MAKE ME A SANDWICH — PicoCTF 2026

Exploiting a misconfigured sudo permission to read a root-owned flag using Emacs in this beginner picoCTF privilege escalation challenge.