Magnussen
@_magnussen_
#CTF player | Member of funcMyLife()
ID: 957340941584658439
https://www.magnussen.funcmylife.fr 27-01-2018 19:54:01
112 Tweet
112 Followers
120 Following
Write-up for Magic (Medium Linux) on Hack The Box! Redirect based SQL injection; Tampered php reverse shell; Dump database for user creds; exploit SUID on unsecure PATH funcmylife.fr/write-up/htb/m…
Write-up for Remote (Easy Windows) on Hack The Box! Find NFS share with credentials to log in on Umbraco (CMS); Exploit RCE on CMS; Find Team Viewer credentials and connect with WinRM funcmylife.fr/write-up/htb/r…
my write up for alles CTF - pwnkemon (hardware) by LiveOverflow 🔴 0xswitch.fr/CTF/alles-ctf-… given a logic analyzer output from a SPI communication between 2 game boys you had to reconstruct a pokemon exchange from generation I !
Write-up for Cache, medium Linux machine, on Hack The Box! Find HMS subdomain, exploit SQLi to find admin creds, exploit file upload to get a reverse shell, password reuse, retrieve password stored in memcached, exploit Docker to get root funcmylife.fr/write-up/htb/c…
Write-up for Blunder, easy Linux machine, on Hack The Box ! Find file with username, create custom wordlist with Cewl, exploit bf on Bludit, exploit CVE to get a webshell, find credz in php file, exploit sudo -u#-1 to get root funcmylife.fr/write-up/htb/b…
Write-up for Tabby, easy Linux machine, on Hack The Box ! Exploit LFI to get tomcat-users.xml, send a malicious War file to get reverse shell, crack ash password through zip file, create a privileged container with LXD to get root funcmylife.fr/write-up/htb/t…
Write-up for Buff, easy Windows machine, on Hack The Box ! Exploit Unauthenticated RCE on Gym Management System 1.0 and then exploit buffer overflow vulnerability on CloudMe to get Administrator access. funcmylife.fr/write-up/htb/b…
WU for SneakyMailer, medium Linux machine on Hack The Box! Probably one of the greatest box I've solved! Perform phishing campaign, upload a reverse shell through FTP, create a malicious python package to get SSH access, exploit Pip3 to get root funcmylife.fr/write-up/htb/s…
WU for Openkeys, medium OpenBSD machine on Hack The Box ! Find swap files and bypass OpenBSD auth framework to retrieve user ssh key. Exploit xlock to privesc. funcmylife.fr/write-up/htb/o…
WU for Laboratory, easy Linux machine on Hack The Box ! Find the git subdomain and create an account, Exploit Gitlab RCE & LFI (CVE-2020-10977) to get a shell, use gitlab-rails to reset admin password, abuse path variable with local script to get root funcmylife.fr/write-up/htb/l…
