CVE-Research

TryHackMe Room - tryhackme.com/jr/cvechallenge Video -...

thm-blue-writeup

TryHackMe — Blue | Phase 1: Reconnaissance with Nmap Course: Cyber Security 101 | Room: Blue | Tool: Nmap Context The Blue room's main objective is the use of Metasploit. However, the first exercise focuses on reconnaissance — identifying open ports and vulnerabilities on the target before any...

Z0FCourse_ReverseEngineering

Reverse Engineering Course This course aims to take an individual from beginner to intermediate advanced is really only achieved through experience in reverse engineering. While this course focuses on Windows 64-bit, the technical knowledge applies to 32-bit Windows and the theory to any OS. The...

Simple-CTF-Writeup

Simple-CTF-Writeup Professional TryHackMe Simple CTF walkthrough covering enumeration, CMS Made Simple SQL Injection CVE-2019-9053, credential recovery, SSH access, privilege escalation via Vim, and root compromise. TryHackMe - Simple CTF Writeup A complete walkthrough of the Simple CTF room on...

THM-Tempest

TryHackMe — Tempest SOC Level 1 Pathway | Incident Response Investigation Overview Full incident response investigation of a compromised Windows machine. The attacker gained initial access via a malicious Word document exploiting CVE-2022-30190 Follina, established persistence, tunneled through t...

CVE-2012-2982-Python-PoC

CVE-2012-2982-Python-PoC This was converted from a metasploit module as an exercise for OSCP studying. It originally came from becoming frustrated with no public exploits to use manually for the box Gamezone from TryHackMe. I anaylzed the metasploit code and coverted it to python. Proof screensho...

CVE-2023-38408

CVE-2023-38408 PoC for the recent critical vuln affecting OpenSSH versions 9.3p2 Designed to work seamlessly with TryHackMe's free access lab environment covering this vuln. https://tryhackme.com/room/cve202338408 NOTE: This will not work outside the THM Lab environment...

50-Days-Of-SQLi

50-Days-Of-SQLi Q. Why I am starting this? I have always struggled as a bug hunter. Whenever I read anything new I learn from it but hardly implement it. And because of that whenever I read anything now, it feels like I know it and so couldn't digest complete information that the writeup has to...

CVE-2020-9484

CVE-2020-9484 with interactive mode and args Designed specifically for CTF challenge CERTain Doom on TryHackMe Join Room https://tryhackme.com/r/room/certaindoom Remake of CVE-2020-9484 by Pentestical Shoutout to ChatGPT for the auto creation of interactive mode, and args :...

CVE-2021-22911-rust

CVE-2021-22911 A rust proof of concept for this CVE. Used as part of https://tryhackme.com/room/rocket, a CTF boot to root on the TryHackMe learning platform. To use, update the constants in main.rs and run, and it should work straight off. Requires that you have the admin email address and...

Exploit for CVE-2016-109618

This is pa...

SVPT_CW_2

CVE-2024-21413 https://github.com/KartheekKandalam99/SVPTCW2 CVE-2024-21413 Setup for CW TRYHACKME provided room for working on this vulnerability. Below is the link to access the room https://tryhackme.com/r/room/monikerlink To access room through RDP we have to connect to TryHackMe VPN. Click...

CVE-2024-21413

CVE-2024-21413 This Python script is used to abuse the CVE-2024-21413 coined "MonikerLink" TryHackMe Room: MonikerLink Assumptions This PoC has been created for a lab environment which means the server needs to be configured in a specific setting i.e. TLS authentication is not supported for...

bx2-writeups

Security Writeups A collection of my cybersecurity writeups covering: TryHackMe Hack The Box Linux Privilege Escalation AI & Infrastructure Security CTFs Security Challenges Author: Nanashi Bx2...

security-writeups

Security Writeups Lab write-ups from self-directed work, mostly TryHackMe, plus a PortSwigger SQLi practical. The reasoning lives on the site — the full methodology, the payloads, the parts where I went wrong first — and this repo is the index and the scripts. Nine rooms, and they are not nine...

CVE-2004-1561

Non-metasploit version of CVE-2004-1561 Alternative to C version Developed for TryHackme : Ice...

TryHackMe-Solar-exploiting-log4j-

This repository does not have a README...

PrintNightmare

TryHackMe | PrintNightmare PrintNightmare Learn about the vulnerability known as PrintNightmare CVE-2021-1675 and CVE-2021-34527 Task 6 Detection: Windows Event Logs Event Viewer Applications and Services Logs Microsoft Windows PrintService Admin...

CVE-2021-44228_PoC

POC for CVE-2021-44228 This python script was created while I was working on the TryHackMe room for Log4j. While this was created with default variables for this room, I used argparse to make the script versatile for a GET request. All necessary varaibles can be changed with different options, se...

n8n-CVE-2025-68613-TryHackMe

TryHackMe Room: n8n: CVE-2025-68613 Player: J4ck3LSyN Host: ... Username: [email protected] Password: Try12345! Methodology Payload: function return this.process.mainModule.require'childprocess'.execSync'cat flag.txt'.toString Payload 2: function return...