Write-ups

In-depth research and notes on security technologies, tradecraft, and lab write-ups.

Web App Pentesting November 3, 2026 3 min read

WIP - Fulcrum | HackTheBox - WIP

Linux Pentesting October 26, 2026 10 min read

Reset | HackTheBox

An easy-difficulty Linux box chaining an insecure password reset into admin access, an LFI that becomes RCE through Apache log poisoning, lateral movement by abusing BSD r-services …

HackTheBox Linux LFI Log Poisoning