https://xihacks.com Cybersecurity writeups, CTF solutions, red teaming research, and security lab notes. en-us https://xihacks.com/post/escape https://xihacks.com/post/escape Mon, 24 Aug 2026 00:00:00 GMT https://xihacks.com/post/authority https://xihacks.com/post/authority Sun, 23 Aug 2026 00:00:00 GMT https://xihacks.com/post/administrator https://xihacks.com/post/administrator Sun, 09 Aug 2026 00:00:00 GMT https://xihacks.com/post/certified https://xihacks.com/post/certified Sun, 09 Aug 2026 00:00:00 GMT https://xihacks.com/post/sauna https://xihacks.com/post/sauna Sun, 28 Jun 2026 00:00:00 GMT https://xihacks.com/post/return https://xihacks.com/post/return Sun, 21 Jun 2026 00:00:00 GMT https://xihacks.com/post/timelapse https://xihacks.com/post/timelapse Fri, 19 Jun 2026 00:00:00 GMT https://xihacks.com/post/support https://xihacks.com/post/support Sun, 05 Apr 2026 00:00:00 GMT https://xihacks.com/post/explore https://xihacks.com/post/explore Tue, 31 Mar 2026 00:00:00 GMT https://xihacks.com/post/boardlight https://xihacks.com/post/boardlight Sun, 29 Mar 2026 00:00:00 GMT https://xihacks.com/post/cicada https://xihacks.com/post/cicada Sun, 29 Mar 2026 00:00:00 GMT https://xihacks.com/post/escapetwo https://xihacks.com/post/escapetwo Sun, 29 Mar 2026 00:00:00 GMT https://xihacks.com/post/steamcloud https://xihacks.com/post/steamcloud Sun, 29 Mar 2026 00:00:00 GMT https://xihacks.com/post/twomillion https://xihacks.com/post/twomillion Sun, 29 Mar 2026 00:00:00 GMT https://xihacks.com/post/driver https://xihacks.com/post/driver Tue, 24 Mar 2026 00:00:00 GMT https://xihacks.com/post/paper https://xihacks.com/post/paper Tue, 24 Mar 2026 00:00:00 GMT https://xihacks.com/post/sau https://xihacks.com/post/sau Tue, 24 Mar 2026 00:00:00 GMT )`. Leveraging the vulnerability we are to gain access to a `Maltrail` instance that is vulnerable to Unauthenticated OS Command Injection, which allows us to gain a reverse shell on the machine as `puma`. A `sudo` misconfiguration is then exploited to gain a `root` shell. ]]> https://xihacks.com/post/devvortex https://xihacks.com/post/devvortex Sun, 22 Mar 2026 00:00:00 GMT https://xihacks.com/post/lacasa-del-papel https://xihacks.com/post/lacasa-del-papel Sun, 22 Mar 2026 00:00:00 GMT https://xihacks.com/post/pentesterlab-serialize-badge https://xihacks.com/post/pentesterlab-serialize-badge Sun, 22 Mar 2026 00:00:00 GMT https://xihacks.com/post/reverse-engineering-i https://xihacks.com/post/reverse-engineering-i Sun, 22 Mar 2026 00:00:00 GMT https://xihacks.com/post/squashed https://xihacks.com/post/squashed Sun, 22 Mar 2026 00:00:00 GMT https://xihacks.com/post/watersnake https://xihacks.com/post/watersnake Sat, 21 Mar 2026 00:00:00 GMT https://xihacks.com/post/access https://xihacks.com/post/access Fri, 20 Mar 2026 00:00:00 GMT https://xihacks.com/post/active-directory-hardening https://xihacks.com/post/active-directory-hardening Fri, 20 Mar 2026 00:00:00 GMT https://xihacks.com/post/active https://xihacks.com/post/active Fri, 20 Mar 2026 00:00:00 GMT https://xihacks.com/post/dealing-with-computer-data https://xihacks.com/post/dealing-with-computer-data Fri, 20 Mar 2026 00:00:00 GMT https://xihacks.com/post/directory-traversal https://xihacks.com/post/directory-traversal Fri, 20 Mar 2026 00:00:00 GMT https://xihacks.com/post/friendzone https://xihacks.com/post/friendzone Fri, 20 Mar 2026 00:00:00 GMT https://xihacks.com/post/linux-hardening https://xihacks.com/post/linux-hardening Fri, 20 Mar 2026 00:00:00 GMT https://xihacks.com/post/linux-luminarium https://xihacks.com/post/linux-luminarium Fri, 20 Mar 2026 00:00:00 GMT https://xihacks.com/post/mastering-wireshark-with-pentesterlabs-pcap https://xihacks.com/post/mastering-wireshark-with-pentesterlabs-pcap Fri, 20 Mar 2026 00:00:00 GMT https://xihacks.com/post/pentesterlab-essential https://xihacks.com/post/pentesterlab-essential Fri, 20 Mar 2026 00:00:00 GMT https://xihacks.com/post/pentesterlab-unix-module https://xihacks.com/post/pentesterlab-unix-module Fri, 20 Mar 2026 00:00:00 GMT https://xihacks.com/post/tabby https://xihacks.com/post/tabby Fri, 20 Mar 2026 00:00:00 GMT https://xihacks.com/post/web-application-pentesting-checklist https://xihacks.com/post/web-application-pentesting-checklist Fri, 20 Mar 2026 00:00:00 GMT https://xihacks.com/post/white-from-pentesterlab https://xihacks.com/post/white-from-pentesterlab Fri, 20 Mar 2026 00:00:00 GMT https://xihacks.com/post/cap https://xihacks.com/post/cap Thu, 19 Mar 2026 00:00:00 GMT https://xihacks.com/post/silo https://xihacks.com/post/silo Thu, 19 Mar 2026 00:00:00 GMT https://xihacks.com/post/blue https://xihacks.com/post/blue Tue, 10 Mar 2026 00:00:00 GMT https://xihacks.com/post/bounty-hunter https://xihacks.com/post/bounty-hunter Tue, 10 Mar 2026 00:00:00 GMT https://xihacks.com/post/goodgames https://xihacks.com/post/goodgames Tue, 10 Mar 2026 00:00:00 GMT https://xihacks.com/post/jerry https://xihacks.com/post/jerry Tue, 10 Mar 2026 00:00:00 GMT https://xihacks.com/post/lame https://xihacks.com/post/lame Tue, 10 Mar 2026 00:00:00 GMT https://xihacks.com/post/netmon https://xihacks.com/post/netmon Tue, 10 Mar 2026 00:00:00 GMT https://xihacks.com/post/remote https://xihacks.com/post/remote Tue, 10 Mar 2026 00:00:00 GMT https://xihacks.com/post/active-directory-basics https://xihacks.com/post/active-directory-basics Sat, 08 Mar 2025 00:00:00 GMT