https://coreyfarley.com/posts/ Recent content in Posts on Corey Farley Hugo en-us Mon, 20 Jul 2026 00:00:00 +0000 https://coreyfarley.com/posts/extplorer-offsec/ Mon, 20 Jul 2026 00:00:00 +0000 https://coreyfarley.com/posts/extplorer-offsec/ A Linux box built around eXtplorer, a PHP file manager. Default creds get a webshell, leaked credentials pivot to a local user, and disk group membership leads straight to root. https://coreyfarley.com/posts/remote-htb/ Mon, 06 Jul 2026 00:00:00 +0000 https://coreyfarley.com/posts/remote-htb/ An easy Windows box running Umbraco CMS. Creds leak from a world-readable NFS share, an authenticated Umbraco exploit gets a foothold, and a Print Spooler abuse gets SYSTEM. https://coreyfarley.com/posts/groundworm-htb/ Mon, 20 Oct 2025 00:00:00 +0000 https://coreyfarley.com/posts/groundworm-htb/ A walkthrough of GroundWorm, a hard-rated DFIR Sherlock on HackTheBox, tracing a simulated APT attack from initial access through ransomware deployment using Splunk and API Monitor. https://coreyfarley.com/posts/infostealer-analysis/ Thu, 21 Aug 2025 00:00:00 +0000 https://coreyfarley.com/posts/infostealer-analysis/ An investigation into a simple infostealer, following the retired TeleStealer Lab from CyberDefenders, covering static and dynamic malware analysis. https://coreyfarley.com/posts/intro-to-malware-analysis/ Mon, 18 Aug 2025 00:00:00 +0000 https://coreyfarley.com/posts/intro-to-malware-analysis/ A high-level overview of the steps taken in the MalaCrypt lab from CyberDefenders, covering static and dynamic malware analysis. https://coreyfarley.com/posts/linux-privilege-escalation/ Tue, 20 May 2025 00:00:00 +0000 https://coreyfarley.com/posts/linux-privilege-escalation/ A walk-through of the Linux Privilege Escalation room in the Jr Penetration Tester pathway on TryHackMe, covering eight core privilege escalation techniques.