Hack The Box - Winter CTF Tinsel Trouble 2025This writeup consists of solutions to only web, pwn and reverse I solved . Web 1: Silent Snow : The critical security flaw resides within the custom WordPress plugin source code at src/plugins/my-plugin/my-plugin.php. // src/plugins/my-plugin/my-plu...Dec 27, 2025·4 min read
HTB-Editor Machine writeupEnumeration gave us a website at wiki.editorial.htb The version for this was clearly visible: Searching around I found an exploit : CVE-2025-24893 Following the instructions I got the shell. Now came the hardest part finding the hibernate.xml file...Aug 13, 2025·2 min read
HTB-Planning WriteupEnumeration: Webpage: I used a top 10000 wordlist with ffuf. I obtained a grafana page with htb. I added this to my /etc/hosts After checking the version I found CVE-2024-9264 Now executing the exploit: Make sure to keep the netcat running on a ...Aug 9, 2025·2 min read
HTB-Ambassador's CTF-firensicsInside the file we had several files , but for some reason it almost felt like a plugin of sort?. I was close but then I realized, why would you create a folder named extension? Anyway I searched for saved-telemetry-pings, which made me understand t...Aug 9, 2025·5 min read
HTB-Code WriteupEnumeration: We find a python code editor interestingly: print(locals()) gave me the following output: print(globals()) revealed a lot of details too ,but nothing interesting except a few functions. I switched to burp and ran the run_code function...Aug 3, 2025·3 min read
Down Under CTF - Love GranniEHint: Solution : Reverse Search We now know that it is indeed Epping Bridge , so the place is Epping railway Station. Now google again with query : In the first article we find: https://historyandheritage.cityofparramatta.nsw.gov.au/blog/2017/02/0...Jul 21, 2025·1 min read
