Offensive Security Research Notes
Hands-on offensive security research focused on Active Directory, web exploitation, privilege escalation, attack methodologies, bug bounty workflows, and practical lab-based learning.
Research Areas
Offensive Security Research
Active Directory tradecraft, Windows internals, privilege escalation, enumeration workflows, and practical offensive methodologies.
Explore ResearchBug Bounty & Web Exploitation
Reconnaissance workflows, web exploitation, authentication flaws, attack chains, and practical real-world methodologies.
Explore Bug BountyLabs & Walkthroughs
Hack The Box, TryHackMe, OffSec, HackeR DNA, and VulnHub walkthroughs focused on methodology, enumeration, and exploitation workflows.
Explore LabsLatest Technical Notes
Pickle Jar - Python Pickle Deserialization to Sudo RCE
CTF writeup exploiting Python pickle deserialization vulnerability in a Flask app to achieve RCE, then escalating privileges via a sudo-allowed backup script.
Read ArticleHidden CMS Breach - GetSimple Unauthenticated Leak to RCE
CTF writeup exploiting a GetSimple CMS 3.3.16 info disclosure to extract admin credentials, then RCE via theme editor webshell and privesc with sudo find.
Read ArticleCompromised 1 - Tomcat Default Credentials to WAR Deploy RCE
CTF writeup exploiting default admin:admin credentials on Apache Tomcat 9.0.96 Manager to deploy a WAR file for RCE, then privesc via sudo find.
Read ArticleAlpwned - SQLi to Werkzeug Debugger RCE on Alpine Linux
CTF writeup exploiting SQL injection in a Flask app to reach an admin dashboard, then using the Werkzeug debugger console for root RCE.
Read ArticleTraversed HackerDNA CTF - Git Exposed & Module Hijacking
CTF writeup exploiting an exposed .git directory to recover leaked SSH credentials, then privesc via Python module hijacking with sudo.
Read ArticleAlVault HackerDNA CTF - Command Injection & Hidden Endpoints
AlVault CTF writeup — exploiting a hidden grep-based search tool to extract SSH credentials, then privesc via os.system() command injection.
Read Article