hc0n Christmas CTF
A long-form challenge chaining web enumeration, CBC padding-oracle abuse, credential discovery, binary analysis, and buffer overflow exploitation.
privilege-escalation
8 posts
Agent P
A multi-stage chain moves from WordPress SQL injection through database credentials, unsafe pickle loading, and a signed-task binary to root.
Beach Bar
Leaked credentials lead to unsafe YAML deserialization, remote code execution, and Linux privilege escalation.
Do Not Disturb
A NoSQL authentication bypass opens an EJS SSTI path, followed by debugger hijacking and privilege escalation.
Infinity Pool
Command injection in a legacy network-check endpoint leads through internal services to full compromise.
Eavesdropper
SSH access as Frank and process monitoring with pspy reveal credentials used for root privilege escalation.
Umbrella
An exposed Docker registry leaks database credentials, leading through cracked hashes, command injection, and a privileged container to root.
Corp Website
CVE-2025-55182 provides remote code execution before a permissive sudo path completes privilege escalation.
