paincakes

Local time in Kathmandu: UTC+05:45

Findings — 15 entries

Writeups

Hack The Box and TryHackMe machines, the flAWS AWS challenges, a Spring Cloud Function CVE, and lately, attacks on LLMs. Most start with an nmap scan and end with a root shell.

  1. F-15 Tricking the Wizard: A Prompt Injection Walkthrough of Gandalf AI Research · AI 15 min
  2. F-14 Web LLM Attacks Research · AI 8 min
  3. F-13 Hospital HTB · Medium 13 min
  4. F-12 GateKeeper THM · Binary Exploitation 18 min
  5. F-11 Shibboleth HTB · Medium 5 min
  6. F-10 Router Space HTB · Easy 4 min
  7. F-09 Querier HTB · Medium 5 min
  8. F-08 Catch HTB · Medium 6 min
  9. F-07 Dynstr HTB · Medium 8 min
  10. F-06 Pit HTB · Medium 7 min
  11. F-05 Forest HTB · Easy 4 min
  12. F-04 Return HTB · Easy 3 min
  13. F-03 FL(AWS): Basic AWS Misconfigurations and Exploitation- Part 2 Cloud · AWS 9 min
  14. F-02 FL(AWS): Basic AWS Misconfigurations and Exploitation- Part 1 Cloud · AWS 5 min
  15. F-01 CVE-2022–22963: Spring Cloud Function RCE Vulnerability Research · CVEs 2 min