https://abdullah-5j.github.io/writeups/Cybersecurity writeups, research, and thoughts by verox.enMon, 02 Nov 2026 00:00:00 GMThttps://abdullah-5j.github.io/thoughts/crta-experience/https://abdullah-5j.github.io/thoughts/crta-experience/Mon, 02 Nov 2026 00:00:00 GMTPassing the Certified Red Team Analyst exam felt like an advanced TryHackMe room — a year of practice mattered more than the course.https://abdullah-5j.github.io/writeups/research/android-rat-threat-analysis/https://abdullah-5j.github.io/writeups/research/android-rat-threat-analysis/Wed, 12 Nov 2025 00:00:00 GMTAn isolated-lab analysis of AhMyth and the risks of trojanized Android apps, sensitive permissions, and command-and-control access.https://abdullah-5j.github.io/writeups/tryhackme/beach-bar/https://abdullah-5j.github.io/writeups/tryhackme/beach-bar/Sun, 09 Aug 2026 00:00:00 GMTLeaked credentials lead to unsafe YAML deserialization, remote code execution, and Linux privilege escalation.https://abdullah-5j.github.io/writeups/tryhackme/room-404/https://abdullah-5j.github.io/writeups/tryhackme/room-404/Sat, 01 Aug 2026 00:00:00 GMTAn exposed .git directory leaks the staging source and a flag left in the repository.https://abdullah-5j.github.io/writeups/tryhackme/towel-on-the-sunbed/https://abdullah-5j.github.io/writeups/tryhackme/towel-on-the-sunbed/Mon, 27 Jul 2026 00:00:00 GMTA race condition lets parallel reward claims bypass the 24-hour lock and open the Whale Vault.https://abdullah-5j.github.io/writeups/tryhackme/umbrella/https://abdullah-5j.github.io/writeups/tryhackme/umbrella/Sun, 07 Jun 2026 00:00:00 GMTAn exposed Docker registry leaks database credentials, leading through cracked hashes, command injection, and a privileged container to root.https://abdullah-5j.github.io/writeups/tryhackme/hc0n-christmas-ctf/https://abdullah-5j.github.io/writeups/tryhackme/hc0n-christmas-ctf/Sat, 05 Sep 2026 00:00:00 GMTA long-form challenge chaining web enumeration, CBC padding-oracle abuse, credential discovery, binary analysis, and buffer overflow exploitation.https://abdullah-5j.github.io/writeups/tryhackme/agent-p/https://abdullah-5j.github.io/writeups/tryhackme/agent-p/Sun, 09 Aug 2026 00:00:00 GMTA multi-stage chain moves from WordPress SQL injection through database credentials, unsafe pickle loading, and a signed-task binary to root.https://abdullah-5j.github.io/writeups/tryhackme/lost-fortune-included/https://abdullah-5j.github.io/writeups/tryhackme/lost-fortune-included/Sat, 08 Aug 2026 00:00:00 GMTA PHP stream-wrapper bypass defeats the document whitelist and reads arbitrary files from the server.https://abdullah-5j.github.io/writeups/tryhackme/b1t-recovery/https://abdullah-5j.github.io/writeups/tryhackme/b1t-recovery/Fri, 07 Aug 2026 00:00:00 GMTKnown plaintext from the THM flag prefix recovers a reused four-byte XOR key and decrypts the challenge file.https://abdullah-5j.github.io/writeups/tryhackme/casino-heist/https://abdullah-5j.github.io/writeups/tryhackme/casino-heist/Thu, 06 Aug 2026 00:00:00 GMTPacket-capture analysis and PyInstaller reverse engineering recover the key used to decrypt exfiltrated jackpot data.https://abdullah-5j.github.io/writeups/tryhackme/fresh-powder/https://abdullah-5j.github.io/writeups/tryhackme/fresh-powder/Thu, 06 Aug 2026 00:00:00 GMTA detection-as-code investigation repairs five broken Sigma rules and validates each fix against the incident report.https://abdullah-5j.github.io/writeups/tryhackme/do-not-disturb/https://abdullah-5j.github.io/writeups/tryhackme/do-not-disturb/Fri, 07 Aug 2026 00:00:00 GMTA NoSQL authentication bypass opens an EJS SSTI path, followed by debugger hijacking and privilege escalation.https://abdullah-5j.github.io/writeups/tryhackme/hollow-shell/https://abdullah-5j.github.io/writeups/tryhackme/hollow-shell/Wed, 05 Aug 2026 00:00:00 GMTDefault credentials and a Zip Slip upload escape the theme directory and turn an automation hook into code execution.https://abdullah-5j.github.io/writeups/tryhackme/infinity-pool/https://abdullah-5j.github.io/writeups/tryhackme/infinity-pool/Mon, 03 Aug 2026 00:00:00 GMTCommand injection in a legacy network-check endpoint leads through internal services to full compromise.https://abdullah-5j.github.io/writeups/tryhackme/the-guestbook/https://abdullah-5j.github.io/writeups/tryhackme/the-guestbook/Wed, 29 Jul 2026 00:00:00 GMTPrompt injection against an AI concierge reveals hidden directives and bypasses output redaction.https://abdullah-5j.github.io/writeups/tryhackme/eavesdropper/https://abdullah-5j.github.io/writeups/tryhackme/eavesdropper/Sun, 21 Jun 2026 00:00:00 GMTSSH access as Frank and process monitoring with pspy reveal credentials used for root privilege escalation.https://abdullah-5j.github.io/writeups/tryhackme/cupids-matchmaker/https://abdullah-5j.github.io/writeups/tryhackme/cupids-matchmaker/Sun, 03 May 2026 00:00:00 GMTStored XSS in a matchmaking survey steals the reviewer’s session cookie and exposes the flag.https://abdullah-5j.github.io/writeups/tryhackme/corp-website/https://abdullah-5j.github.io/writeups/tryhackme/corp-website/Sun, 10 May 2026 00:00:00 GMTCVE-2025-55182 provides remote code execution before a permissive sudo path completes privilege escalation.https://abdullah-5j.github.io/writeups/tryhackme/cupidbot/https://abdullah-5j.github.io/writeups/tryhackme/cupidbot/Thu, 14 May 2026 00:00:00 GMTThe bot leaks its verification code, which can be replayed to authorize disclosure of all three challenge flags.