Exploiting AlwaysInstallElevated for Windows Privilege Escalation
·2 mins
A walkthrough of exploiting the AlwaysInstallElevated misconfiguration on Windows to escalate from user to SYSTEM using a malicious MSI payload.
Tryhackme
LazyAdmin TryHackMe Walkthrough
·4 mins
A complete walkthrough of the LazyAdmin room on TryHackMe, demonstrating enumeration, exploitation, and privilege escalation.
Anonymous Rooted: A TryHackMe Walkthrough
This walkthrough covers the TryHackMe ‘Anonymous’ room. I gain user-level access via FTP and a writable script, capture the user flag, and escalate to root via a SUID misconfiguration.
Escalate and Defend: Linux Kernel Exploit Walkthrough
A dual perspective walkthrough of TryHackMe’s Linux Privilege Escalation room (Kernel Exploits), including offensive steps and defense strategies mapped to the MITRE ATT&CK Framework.
TryHackMe IDOR Room Walkthrough
Walkthrough of the Insecure Direct Object Reference (IDOR) room on TryHackMe, part of the Jr. Web Penetration Tester learning path.
🧠Access the TryHackMe IDOR Room — Complete this room to practice real-world exploitation of Insecure Direct Object References in a safe lab environment.
Steel Mountain - TryHackMe Walkthrough by Nisha
·2 mins
Hack into a Mr. Robot themed Windows machine. Use metasploit for initial access, utilise powershell for Windows privilege escalation enumeration and learn a new technique to get Administrator access.
Hacking Kenobi: From Anonymous Access to Root like a Rebel
·7 mins
A complete walkthrough of the Kenobi TryHackMe room, covering enumeration, exploiting ProFTPD, and privilege escalation using SUID PATH hijacking.
TryHackMe Ice - Walkthrough by Nisha
·8 mins
Deploy & hack into a Windows machine, exploiting a very poorly secured media server.
Room Link: https://tryhackme.com/r/room/ice
Task 1 - Connect #
Get connected to the TryHackMe network using OpenVPN. Make sure to first download your configuration file from your access page.
TryHackMe Ignite Room Walkthrough: Exploiting Fuel CMS 1.4.1 RCE
·4 mins
Walkthrough of TryHackMe’s Ignite room where we exploit a Remote Code Execution vulnerability in Fuel CMS 1.4.1 (CVE-2018-16763). Learn the steps of enumeration, exploitation, privilege escalation, and defense strategies.
Walking An Application - THM Walkthrough by Nisha
Room Link: https://tryhackme.com/r/room/walkinganapplication
In the "Walking An Application" room on TryHackMe, you will learn how to manually assess a web application for security vulnerabilities using only the built-in tools available in your web browser. Automated security tools and scripts often miss many potential vulnerabilities and valuable information. This room emphasizes the importance of manual review to identify and understand these overlooked issues.