Privilege-Escalation on Notes by Nisha

Exploiting AlwaysInstallElevated for Windows Privilege Escalation

Tue, 06 May 2025 00:00:00 +0000

A walkthrough of exploiting the AlwaysInstallElevated misconfiguration on Windows to escalate from user to SYSTEM using a malicious MSI payload.

Devel Rooted: A Hack The Box Walkthrough

Tue, 22 Apr 2025 00:00:00 +0000

This post is a walkthrough of the ‘Devel’ retired machine from Hack The Box. I gain initial access through an exposed FTP and WebDAV setup, then escalate privileges using MS15-051.

LazyAdmin TryHackMe Walkthrough

Thu, 27 Mar 2025 00:00:00 +0000

A complete walkthrough of the LazyAdmin room on TryHackMe, demonstrating enumeration, exploitation, and privilege escalation.

Anonymous Rooted: A TryHackMe Walkthrough

Mon, 03 Mar 2025 00:00:00 +0000

This walkthrough covers the TryHackMe ‘Anonymous’ room. I gain user-level access via FTP and a writable script, capture the user flag, and escalate to root via a SUID misconfiguration.

Compromising the Dev Box: A PNPT Walkthrough with Mitigation and MITRE ATT&CK Mapping

Sat, 07 Dec 2024 00:00:00 +0000

A step-by-step walkthrough of compromising the Dev Box from TCM Security’s PNPT training course, including detailed explanations, mitigation steps, and a comprehensive mapping to MITRE ATT&CK tactics and techniques.

Escalate and Defend: Linux Kernel Exploit Walkthrough

Fri, 11 Oct 2024 00:00:00 +0000

A dual perspective walkthrough of TryHackMe’s Linux Privilege Escalation room (Kernel Exploits), including offensive steps and defense strategies mapped to the MITRE ATT&CK Framework.

Steel Mountain - TryHackMe Walkthrough by Nisha

Sun, 16 Jun 2024 00:00:00 +0000

Hack into a Mr. Robot themed Windows machine. Use metasploit for initial access, utilise powershell for Windows privilege escalation enumeration and learn a new technique to get Administrator access.

Hacking Kenobi: From Anonymous Access to Root like a Rebel

Fri, 14 Jun 2024 00:00:00 +0000

A complete walkthrough of the Kenobi TryHackMe room, covering enumeration, exploiting ProFTPD, and privilege escalation using SUID PATH hijacking.

TryHackMe Ice - Walkthrough by Nisha

Tue, 04 Jun 2024 00:00:00 +0000

Deploy & hack into a Windows machine, exploiting a very poorly secured media server.

Room Link: https://tryhackme.com/r/room/ice

Task 1 - Connect #

Get connected to the TryHackMe network using OpenVPN. Make sure to first download your configuration file from your access page.