Write-ups

In-depth research and notes on security technologies, tradecraft, and lab write-ups.

Web App Pentesting November 6, 2026 12 min read

Altered | HackTheBox

A hard-difficulty Linux box centered on a Laravel password-reset flow brute-forced past rate limiting with spoofed IP headers, then a type-juggling bypass that unlocks SQL …

HackTheBox SQL Injection Type Juggling Web

Linux Pentesting May 20, 2025 14 min read

Linux Privilege Escalation | TryHackMe

A walk-through of the Linux Privilege Escalation room in the Jr Penetration Tester pathway on TryHackMe, covering eight core privilege escalation techniques.

privilege escalation linux TryHackMe