Posts

Sep 25, 2026
VulNyx - Connection

Writeup | OS: Windows - Difficulty: Hard
misconfigured lfi php mremoteng mremoteng-decrypt
Sep 19, 2026
VulNyx - Mail

Writeup | OS: Linux - Difficulty: Medium
lfi mail-poisoning php rce misconfigured mail-sudo ipv6 ncat-sudo
Aug 21, 2026
VulNyx - Method

Writeup | OS: Linux - Difficulty: Easy
webdav davtest cadaver rce misconfigured pspy cron wildcard
Aug 15, 2026
VulNyx - Network

Writeup | OS: Linux - Difficulty: Low
command-injection rce misconfigured ip-sudo gtfobins
Jul 27, 2026
VulNyx - Lookup

Writeup | OS: Linux - Difficulty: Easy
dns dig nslookup reverse-dns-lookup zone-transfer ssh-bruteforce nsenter-sudo gtfobins
Jun 22, 2026
VulNyx - Monitor

Writeup | OS: Linux - Difficulty: Hard
vhost-fuzzing hydra http-get-bruteforce mac-to-ipv6 ipv6 php log-poisoning rce lfm-sudo
Jun 11, 2026
CyLab - Includes

Writeup | Category: Web Exploitation - Difficulty: Easy
cylab web-exploitation
Jun 11, 2026
CyLab - GET aHEAD

Writeup | Category: Web Exploitation - Difficulty: Easy
cylab web-exploitation http-methods
Jun 2, 2026
VulNyx - Tech

Writeup | OS: Windows - Difficulty: Medium
misconfigured lfi php log-poisoning rce netexec rdp xfreerdp
Jun 1, 2026
VulNyx - Cibercamp

Writeup | OS: Linux - Difficulty: Easy
wordpress cms wpscan plugin-wp-file-manager cve-2020-25213 rce vim-sudo
May 31, 2026
CyLab - ping-cmd

Writeup | Category: General Skills - Difficulty: Easy
cylab general-skills command-injection
Feb 22, 2026
picoCTF - Blame Game

Writeup | Category: General Skills - Difficulty: Easy
picoctf general-skills git
Feb 22, 2026
picoCTF - Bases

Writeup | Category: General Skills - Difficulty: Easy
picoctf general-skills base64
Feb 8, 2026
VulNyx - Policy

Writeup | OS: Windows - Difficulty: Easy
zip-crack gpp groups.xml gpp-decrypt misconfigured winpeas env
Feb 7, 2026
picoCTF - Hidden in plainsight

Writeup | Category: Forensics - Difficulty: Easy
picoctf forensics stego exiftool steghide
Feb 5, 2026
picoCTF - SSTI1

Writeup | Category: Web Exploitation - Difficulty: Easy
picoctf web-exploitation ssti
Feb 1, 2026
picoCTF - Local Authority

Writeup | Category: Web Exploitation - Difficulty: Easy
picoctf web-exploitation
Jan 31, 2026
VulNyx - Blind

Writeup | OS: Linux - Difficulty: Easy
blind-command-injection misconfigured jshell-sudo
Jan 5, 2026
VulNyx - School

Writeup | OS: Windows - Difficulty: Hard
lfi tomcat misconfigured msfvenom war seimpersonateprivilege printspoofer
Jan 4, 2026
VulNyx - SRV

Writeup | OS: Windows - Difficulty: Easy
misconfigured ftp-anonymous iis msfvenom aspx rce seimpersonateprivilege god-potato
Dec 13, 2025
VulNyx - Alpine

Writeup | OS: Linux - Difficulty: Easy
git misconfigured cron
Nov 30, 2025
VulNyx - Memory

Writeup | OS: Linux - Difficulty: Easy
memcache hydra ssh-bruteforce wormhole-sudo
Oct 13, 2025
VulNyx - Lower7

Writeup | OS: Linux - Difficulty: Low
ftp hydra ftp-bruteforce node.js rce shadow-group yescrypt-crack
Oct 11, 2025
VulNyx - Store

Writeup | OS: Windows - Difficulty: Easy
misconfigured iis file-upload msfvenom aspx rce seimpersonateprivilege sigma-potato
Oct 6, 2025
VulNyx - Misconfigured

Writeup | OS: Windows - Difficulty: Medium
active-directory ldap ldapsearch smb-bruteforce seimpersonateprivilege sigma-potato
Oct 2, 2025
VulNyx - Care

Writeup | OS: Linux - Difficulty: Easy
lfi squid log-poisoning rce perl-sudo keepass kdbx-crack
Sep 13, 2025
VulNyx - Explorer

Writeup | OS: Linux - Difficulty: Easy
extplorer default-creds misconfigured php rce
Aug 23, 2025
VulNyx - Open

Writeup | OS: Linux - Difficulty: Easy
openplc default-creds hydra auth-basic http-get-bruteforce ttyd sqlite sqlite3
Jul 11, 2025
VulNyx - Absolute

Writeup | OS: Linux - Difficulty: Easy
smb wfuzz auth-basic http-get-bruteforce php rce rclone-sudo
Jun 11, 2025
VulNyx - Observer

Writeup | OS: Linux - Difficulty: Easy
hydra ssh-bruteforce misconfigured x11 env
Jun 4, 2025
VulNyx - Sales

Writeup | OS: Linux - Difficulty: Easy
vhost-fuzzing username-anarchy cewl http-post-bruteforce suitecrm cve-2022-23940 ld_preload
May 31, 2025
VulNyx - Build

Writeup | OS: Windows - Difficulty: Low
jenkins default-creds misconfigured rce
May 24, 2025
VulNyx - Lower6

Writeup | OS: Linux - Difficulty: Low
redis redis-cli hydra redis-bruteforce ssh-bruteforce capabilities
May 18, 2025
VulNyx - Denied

Writeup | OS: Linux - Difficulty: Hard
misconfigured hydra ssh-bruteforce doas
May 6, 2025
VulNyx - Carlam

Writeup | OS: Linux - Difficulty: Easy
nfs smb rid-bruteforce leet-speak ssh-bruteforce socket-file iftop-sudo
May 4, 2025
VulNyx - Ober

Writeup | OS: Linux - Difficulty: Easy
october cms default-creds misconfigured rce
Apr 9, 2025
VulNyx - Lower5

Writeup | OS: Linux - Difficulty: Low
lfi log-poisoning bash-sudo gpg-crack pass-sudo
Mar 15, 2025
VulNyx - Lower4

Writeup | OS: Linux - Difficulty: Low
ident misconfigured hydra ssh-bruteforce multitail-sudo
Mar 9, 2025
VulNyx - Lower3

Writeup | OS: Linux - Difficulty: Low
nfs misconfigured rce nfs-no_root_squash
Mar 8, 2025
VulNyx - Change

Writeup | OS: Windows - Difficulty: Media
active-directory smb-bruteforce kerbrute bloodhound forcechangepassword winpeas autologon
Feb 16, 2025
VulNyx - Lower2

Writeup | OS: Linux - Difficulty: Low
telnet hydra telnet-bruteforce shadow-group /etc/shadow-writable
Feb 4, 2025
VulNyx - Hit

Writeup | OS: Linux - Difficulty: Easy
git git-dumper knock port-knocking id_rsa-crack adm-group
Jan 22, 2025
VulNyx - APex

Writeup | OS: Linux - Difficulty: Easy
osint finger sqlite sqlite3 netexec ssh-bruteforce nmcli-sudo
Jan 5, 2025
VulNyx - Swamp

Writeup | OS: Linux - Difficulty: Easy
dns dig axfr zone-transfer misconfigured command-injection
Jan 2, 2025
VulNyx - Magic

Writeup | OS: Linux - Difficulty: Easy
smb smb-rid-bruteforce smb-bruteforce smb-shares smb-magic-scripts capabilities
Dec 20, 2024
VulNyx - Blogger

Writeup | OS: Linux - Difficulty: Low
wordpress cms wpscan wordpress-user-enumeration wordpress-bruteforce php rce
Dec 15, 2024
VulNyx - Lower

Writeup | OS: Linux - Difficulty: Low
vhost-fuzzing cewl hydra ssh-bruteforce misconfigured /etc/group-writable
Dec 7, 2024
VulNyx - War

Writeup | OS: Windows - Difficulty: Easy
tomcat default-creds misconfigured msfvenom war seimpersonateprivilege printspoofer
Nov 1, 2024
VulNyx - Fuser

Writeup | OS: Linux - Difficulty: Low
cups cve-2024-47176 misconfigured dash-suid
Oct 23, 2024
VulNyx - Controler

Writeup | OS: Windows - Difficulty: Medium
active-directory smb-bruteforce kerbrute bloodhound as-rep-roasting tgt dcsync
Sep 2, 2024
VulNyx - Hosting

Writeup | OS: Windows - Difficulty: Easy
smb smb-bruteforce sebackupprivilege secretsdump sam-system pass-the-hash
Jul 13, 2024
VulNyx - Call

Writeup | OS: Linux - Difficulty: Easy
udp sip md5-crack sudo-sudo
Jun 11, 2024
VulNyx - Send

Writeup | OS: Linux - Difficulty: Easy
rsync cron pspy misconfigured apt-writable
May 24, 2024
VulNyx - Service

Writeup | OS: Linux - Difficulty: Easy
joomla cms joomscan cve-2023-23752 rce php information-disclosure su-bruteforce docker-suid
Apr 23, 2024
VulNyx - Hook

Writeup | OS: Linux - Difficulty: Easy
htmlawed cve-2022-35914 rce perl-sudo iex-sudo elixir
Apr 15, 2024
VulNyx - Exec

Writeup | OS: Linux - Difficulty: Low
smb smbclient misconfigured rce bash-sudo apt-sudo
Mar 28, 2024
VulNyx - Diff3r3ntS3c

Writeup | OS: Linux - Difficulty: Low
misconfigured file-upload extensions-bypass cron
Mar 27, 2024
VulNyx - HackingStation

Writeup | OS: Linux - Difficulty: Low
misconfigured command-injection rce nmap-sudo
Feb 28, 2024
VulNyx - Plex

Writeup | OS: Linux - Difficulty: Easy
sslh multiplexer jwt misconfigured mutt-sudo
Feb 19, 2024
VulNyx - Friends

Writeup | OS: Linux - Difficulty: Easy
osint mysql mysql-bruteforce mysql-load-file mysql-into-outfile batcat-sudo su-sudo
Feb 3, 2024
VulNyx - Eternal

Writeup | OS: Windows - Difficulty: Low
smb ms17-010 cve-2017-0143 eternalblue rce
Jan 21, 2024
VulNyx - Experience

Writeup | OS: Windows - Difficulty: Low
smb ms08-067 cve-2008-4250 netapi rce
Jan 1, 2024
VulNyx - Load

Writeup | OS: Linux - Difficulty: Easy
ritecms cms default-creds file-upload php rce crash-sudo xauth-sudo
Dec 10, 2023
VulNyx - Agent

Writeup | OS: Linux - Difficulty: Low
user-agent-bypass websvn cve-2021-32305 c99-sudo ssh-agent-sudo
Dec 2, 2023
VulNyx - Infected

Writeup | OS: Linux - Difficulty: Low
backdoor mod_backdoor rce misconfigured service-sudo joe-sudo
Dec 1, 2023
VulNyx - Mux

Writeup | OS: Linux - Difficulty: Low
stego strings rlogin misconfigured tmux-sudo
Nov 22, 2023
VulNyx - Unit

Writeup | OS: Linux - Difficulty: Easy
http-methods put move misconfigured xargs-sudo su-sudo
Nov 11, 2023
VulNyx - First

Writeup | OS: Linux - Difficulty: Low
raspberry default-creds misconfigured rbash rbash-bypass cron cron-hijacking
Oct 26, 2023
VulNyx - Basic

Writeup | OS: Linux - Difficulty: Low
cups misconfigured hydra ssh-bruteforce env-suid
Oct 6, 2023
VulNyx - Robot

Writeup | OS: Linux - Difficulty: Low
stego mongodb cupp ssh-bruteforce sh-sudo python3-sudo awk-sudo zzuf-sudo
Sep 9, 2023
VulNyx - Play

Writeup | OS: Linux - Difficulty: Easy
musicco path-traversal arbitrary-directory-download ssh-bruteforce nnn-sudo
Aug 18, 2023
VulNyx - Slash

Writeup | OS: Linux - Difficulty: Easy
nginx-misconfigured path-traversal ssh-bruteforce aoss-sudo
Aug 16, 2023
VulNyx - Remote

Writeup | OS: Linux - Difficulty: Easy
wordpress cms wpscan gwolle-plugin cve-2015-8351 rfi php rce rename-sudo
Aug 3, 2023
VulNyx - Plot

Writeup | OS: Linux - Difficulty: Low
vhost-fuzzing sar2html rce misconfigured gtfobins ssh-sudo wildcard
Jul 28, 2023
VulNyx - Share

Writeup | OS: Linux - Difficulty: Low
weborf cve-2010-3306 lfi id_rsa-crack yafc-sudo
Jul 24, 2023
VulNyx - Beginner

Writeup | OS: Linux - Difficulty: Low
udp tftp misconfigured tftp-bruteforce metasploit html2text-sudo
Jun 25, 2023
VulNyx - Shop

Writeup | OS: Linux - Difficulty: Easy
sqli sql-injection time-based-sqli blind-sqli sqlmap ssh-bruteforce capabilities
Jun 15, 2023
VulNyx - Look

Writeup | OS: Linux - Difficulty: Low
misconfigured hydra ssh-bruteforce misconfigured env nokogiri-sudo
Jun 2, 2023
VulNyx - Flash

Writeup | OS: Linux - Difficulty: Easy
ssti rce misconfigured expect-sudo gtfobins
May 22, 2023
VulNyx - Noob

Writeup | OS: Linux - Difficulty: Low
misconfigured id_rsa-crack su-bruteforce
May 17, 2023
VulNyx - Node

Writeup | OS: Linux - Difficulty: Low
node-red misconfigured rce node-sudo gtfobins
May 14, 2023
VulNyx - External

Writeup | OS: Linux - Difficulty: Easy
vhost-fuzzing xxe mysql misconfigured mysql-sudo gtfobins
May 11, 2023
VulNyx - Deploy

Writeup | OS: Linux - Difficulty: Low
tomcat default-creds misconfigured msfvenom war gtfobins ex-sudo
May 6, 2023
VulNyx - Zone

Writeup | OS: Linux - Difficulty: Easy
dns dig axfr zone-transfer file-upload extensions-bypass phar rce ranger-sudo lynx-sudo
May 5, 2023
VulNyx - Zero

Writeup | OS: Linux - Difficulty: Low
php-8.1.0-dev backdoor rce misconfigured wine-sudo
May 4, 2023
VulNyx - Printer

Writeup | OS: Linux - Difficulty: Easy
rce misconfigured screen-suid
May 3, 2023
VulNyx - Real

Writeup | OS: Linux - Difficulty: Low
unrealircd cve-2010-2075 rce pspy cron /etc/hosts-writable
Apr 28, 2023
VulNyx - Shock

Writeup | OS: Linux - Difficulty: Low
shellshock cve-2014-6271 rce misconfigured gtfobins busybox-sudo systemctl-sudo
Apr 26, 2023
VulNyx - Backdoor

Writeup | OS: Linux - Difficulty: Hard
backdoor wfuzz http-post-bruteforce rce apache2.conf-writable bettercap-sudo
Apr 23, 2023
VulNyx - Fing

Writeup | OS: Linux - Difficulty: Low
finger finger-bruteforce hydra ssh-bruteforce misconfigured doas
Apr 21, 2023
VulNyx - Doctor

Writeup | OS: Linux - Difficulty: Low
lfi id_rsa-crack misconfigured passwd-writable
Apr 19, 2023
VulNyx - Brain

Writeup | OS: Linux - Difficulty: Easy
lfi misconfigured wfuzz-sudo python-library-hijacking
Apr 18, 2023
VulNyx - Hat

Writeup | OS: Linux - Difficulty: Medium
lfi ipv6 ftp hydra ftp-bruteforce misconfigured id_rsa-crack nmap-sudo
Apr 17, 2023
VulNyx - Ready

Writeup | OS: Linux - Difficulty: Easy
redis redis-cli misconfigured php rce disk-group id_rsa-crack zip-crack
Mar 1, 2022
/etc/passwd (Writable)

Privilege Escalation | Linux
/etc/passwd passwd-writable linux-privilege-escalation
Mar 1, 2022
Windows Enumeration

Privilege Escalation | Windows
windows windows-enumeration windows-privilege-escalation
Mar 1, 2022
Wildcard

Privilege Escalation | Linux
linux linux-privilege-escalation wilcard wilcard-injection
Mar 1, 2022
Tomcat

Pentesting | Apache Tomcat (Tomcat)
web tomcat war
Mar 1, 2022
Subdomains Enumeration

Pentesting | Virtual Host (VHOST)
web subdomains-enumeration vhost vhost-fuzzing
Mar 1, 2022
Server Operators

Domain Privilege Escalation | Server Operators
windows-domain-privilege-escalation
Mar 1, 2022
SeBackupPrivilege

Privilege Escalation | Windows
windows-local-privilege-escalation
Mar 1, 2022
Reverse Shells

Cheatsheet | Reverse Shells Windows & Linux.
reverse-shells linux windows
Mar 1, 2022
Port Scanning

El escaneo de puertos (Port Scan), es una técnica utilizada por un atacante para identificar los puertos abiertos en un sistema informático o red.
port open-port tcp udp sctp network
Mar 1, 2022
Port Knocking

El golpeo de puertos (Port Knocking), es un mecanismo para abrir puertos externamente mediante una secuencia preestablecida a puertos que se encuentran cerrados.
knock port-knocking network
Mar 1, 2022
Port Forwarding

El reenvío de puertos (Port Forwarding), es una técnica de redes que permite a dispositivos externos acceder a servicios internos dentro de una red privada.
port-forwarding local-port-forwarding remote-port-forwarding dynamic-port-forwarding network
Mar 1, 2022
PHP Wrappers

En PHP, un wrapper o envoltorio es una función que actúa como intermediario para acceder a datos de recursos locales o en memoria.
php php-wrappers lfi web
Mar 1, 2022
🚧October (Under Construction)
Mar 1, 2022
NFS (no_root_squash)

Privilege Escalation | NFS (no_root_squash)
nfs nfs-no_root_squash linux-privilege-escalation
Mar 1, 2022
Log Poisoning

Cheatsheet | Log Poisoning (LFI to RCE)
web php lfi rce log-poisoning
Mar 1, 2022
Linux Enumeration

Privilege Escalation | Linux
linux linux-enumeration linux-privilege-escalation
Mar 1, 2022
Host Discovery

Cheatsheet | Host Discovery
host-discovery arp ping network
Mar 1, 2022
HTTP Status Codes

Cheatsheet | HTTP Status Codes
web http-status-codes
Mar 1, 2022
Linux Groups

Privilege Escalation | Linux
linux linux-groups linux-privilege-escalation
Mar 1, 2022
ForceChangePassword (DACL)

Domain Privilege Escalation | ForceChangePassword (DACL)
active-directory windows-domain-privilege-escalation force-change-password
Mar 1, 2022
File Transfer (Windows)

Cheatsheet | File Transfer (Windows)
windows file-transfer windows-file-transfer
Mar 1, 2022
File Transfer (Linux)

Cheatsheet | File Transfer (Linux)
linux file-transfer linux-file-transfer
Mar 1, 2022
DCSync

Domain Privilege Escalation | DCSync
active-directory windows-domain-privilege-escalation dcsync
Mar 1, 2022
Cron

Privilege Escalation | Linux
cron crontab task linux-privilege-escalation
Mar 1, 2022
Brute Force

Cheatsheet | Brute Force.
brute-force crack cracking password network
Mar 1, 2022
BloodHound

Active Directory (AD) | BloodHound
windows active-directory domain-enumeration windows-domain-privilege-escalation
Mar 1, 2022
Azure Admins

Domain Privilege Escalation | Azure Admins
active-directory azure-admins windows-domain-privilege-escalation
Mar 1, 2022
AS-REP Roasting

Active Directory (AD) | AS-REP Roasting
active-directory tgt as-rep-roasting
Mar 1, 2022
6697 - UnrealIRCd

Service | Name: UnrealIRCd - Port: 6697 - Protocol: TCP
unrealircd tcp service
Mar 1, 2022
6379 - Redis

Service | Name: Redis - Port: 6379 - Protocol: TCP
redis tcp service
Mar 1, 2022
5986 - WinRM (SSL)

Service | Name: WinRM (SSL) - Port: 5986 - Protocol: TCP
winrm tcp service
Mar 1, 2022
5985 - WinRM

Service | Name: WinRM - Port: 5985 - Protocol: TCP
winrm tcp service
Mar 1, 2022
5901 - VNC

Service | Name: VNC - Port: 5901 - Protocol: TCP
vnc tcp service
Mar 1, 2022
3389 - RDP

Service | Name: RDP - Port: 3389 - Protocol: TCP
rdp tcp service
Mar 1, 2022
3360 - ISCSI

Service | Name: ISCSI - Port: 3360 - Protocol: TCP
iscsi tcp service
Mar 1, 2022
3306 - MySQL

Service | Name: MySQL - Port: 3306 - Protocol: TCP
mysql tcp service
Mar 1, 2022
3128 - Squid

Service | Name: Squid - Port: 3128 - Protocol: TCP
squid tcp service
Mar 1, 2022
2049 - NFS

Service | Name: NFS - Port: 2049 - Protocol: TCP
nfs tcp service
Mar 1, 2022
873 - Rsync

Service | Name: Rsync - Port: 873 - Protocol: TCP
rsync tcp service
Mar 1, 2022
445 - SMB

Service | Name: SMB - Port: 445 - Protocol: TCP
smb tcp service
Mar 1, 2022
389 - LDAP

Service | Name: LDAP - Port: 389 - Protocol: TCP
ldap tcp service
Mar 1, 2022
161 - SNMP (UDP)

Service | Name: SNMP - Port: 161 - Protocol: UDP
snmp udp service
Mar 1, 2022
79 - Finger

Service | Name: Finger - Port: 79 - Protocol: TCP
finger tcp service
Mar 1, 2022
53 - DNS

Service | Name: DNS - Port: 53 - Protocol: TCP
dns tcp service
Mar 1, 2022
23 - Telnet

Service | Name: Telnet - Port: 23 - Protocol: TCP
telnet tcp service
Mar 1, 2022
22 - SSH

Service | Name: SSH - Port: 22 - Protocol: TCP
ssh tcp service
Mar 1, 2022
21 - FTP

Service | Name: FTP - Port: 21 - Protocol: TCP
ftp tcp service