2025-10-01 103 min
[research]
TryHackMe Wreath Writeup: pivoting a three host network
A full black-box red team engagement against the TryHackMe Wreath network: GitStack RCE, pivoting through three hosts, an unquoted service path and C2.
A full black-box red team engagement against the TryHackMe Wreath network: GitStack RCE, pivoting through three hosts, an unquoted service path and C2.
Easy Linux box from Season 7. An LFI in a Flask booking app reads a Gitea SQLite database, and the hashes inside crack to an SSH login and then to root.