https://www.netwalker.com.br/blog en-us souzagabriel.bsb@gmail.com (Gabriel Souza) souzagabriel.bsb@gmail.com (Gabriel Souza) Sat, 23 Nov 2024 00:00:00 GMT https://www.netwalker.com.br/blog/bintrunk-writeup https://www.netwalker.com.br/blog/bintrunk-writeup Application has a BOLA vulnerability, unauthorized file access, SSH key usage, privilege escalation via SUID, and code execution. Sat, 23 Nov 2024 00:00:00 GMT souzagabriel.bsb@gmail.com (Gabriel Souza) BOLALinuxHacking Club https://www.netwalker.com.br/blog/calc-writeup https://www.netwalker.com.br/blog/calc-writeup The Calc machine is vulnerable to code injection, unauthorized file access, and Python library hijacking for privilege escalation. Sat, 09 Nov 2024 00:00:00 GMT souzagabriel.bsb@gmail.com (Gabriel Souza) Command InjectionLinuxHacking Club https://www.netwalker.com.br/blog/cap-writeup https://www.netwalker.com.br/blog/cap-writeup The application has the following vulnerabilities: endpoint enumeration via FUZZ, SQL Injection, remote command execution (RCE), and privilege escalation via Linux capabilities. Thu, 14 Nov 2024 00:00:00 GMT souzagabriel.bsb@gmail.com (Gabriel Souza) API RESTSQLIIDORLinuxHacking Club https://www.netwalker.com.br/blog/convert-writeup https://www.netwalker.com.br/blog/convert-writeup The application has remote code execution (RCE) vulnerabilities in the ReportLab library and privilege escalation via "Shared Library Hijacking". Sun, 17 Nov 2024 00:00:00 GMT souzagabriel.bsb@gmail.com (Gabriel Souza) CVE-2023-33733RCELinuxHacking Club https://www.netwalker.com.br/blog/dynamite-writeup https://www.netwalker.com.br/blog/dynamite-writeup The Dynamite machine is vulnerable to Race condition, SSTI, LFR and more. Tue, 10 Jun 2025 00:00:00 GMT souzagabriel.bsb@gmail.com (Gabriel Souza) Race ConditionSSTILFRGraphQLLinuxHacking Club https://www.netwalker.com.br/blog/evasion-writeup https://www.netwalker.com.br/blog/evasion-writeup The Evasion machine is vulnerable to LFI with filter bypass, session poisoning for RCE, crontab, and privilege escalation via sudo. Sat, 22 Mar 2025 00:00:00 GMT souzagabriel.bsb@gmail.com (Gabriel Souza) LFILinuxHacking Club https://www.netwalker.com.br/blog/forged-writeup https://www.netwalker.com.br/blog/forged-writeup The application is vulnerable to JWT token forgery, remote code execution (RCE), and privilege escalation via slo-generator. Sat, 15 Feb 2025 00:00:00 GMT souzagabriel.bsb@gmail.com (Gabriel Souza) RCELinuxHacking Club https://www.netwalker.com.br/blog/guardian-writeup https://www.netwalker.com.br/blog/guardian-writeup Machine involving SQL Injection, code injection, and reversing (PE). Sun, 16 Jun 2024 00:00:00 GMT souzagabriel.bsb@gmail.com (Gabriel Souza) SQLICODE INJECTIONLinuxHacking Club https://www.netwalker.com.br/blog/heartmatch-writeup https://www.netwalker.com.br/blog/heartmatch-writeup The HeartMatch machine is vulnerable to insecure deserialization and privilege escalation through SUID. Mon, 12 May 2025 00:00:00 GMT souzagabriel.bsb@gmail.com (Gabriel Souza) Insecure DeserializationLinuxHacking Club https://www.netwalker.com.br/blog/iNotes-writeup https://www.netwalker.com.br/blog/iNotes-writeup This is a HackingClub championship machine where we found an IDOR that provides initial access and Privilege Escalation through XAMPP. Wed, 13 Nov 2024 00:00:00 GMT souzagabriel.bsb@gmail.com (Gabriel Souza) IDORWindowsHacking Club https://www.netwalker.com.br/blog/iam-writeup https://www.netwalker.com.br/blog/iam-writeup IAM Machine has the CVE-2021-40438 vulnerability, which allows SSRF in Apache, resulting in temporary AWS credentials and privilege escalation to root. Wed, 05 Mar 2025 00:00:00 GMT souzagabriel.bsb@gmail.com (Gabriel Souza) SSRFCloudLinuxHacking Club https://www.netwalker.com.br/blog/injection-writeup https://www.netwalker.com.br/blog/injection-writeup The Injection machine is vulnerable to Command Injection (CVE-2022-36231) and privilege escalation via sudo. Mon, 25 Nov 2024 00:00:00 GMT souzagabriel.bsb@gmail.com (Gabriel Souza) CVE-2022-36231Command InjectionLinuxHacking Club https://www.netwalker.com.br/blog/interface-writeup https://www.netwalker.com.br/blog/interface-writeup The application has vulnerabilities such as CVE-2022-29464, unrestricted file upload and remote code execution, privilege escalation via SUID binary, and Docker escape. Wed, 16 Oct 2024 00:00:00 GMT souzagabriel.bsb@gmail.com (Gabriel Souza) CVE-2022-29464LinuxHacking Club https://www.netwalker.com.br/blog/lion-writeup https://www.netwalker.com.br/blog/lion-writeup The Lion machine is vulnerable to SQL injection, allowing RCE through the upload of a webshell, and has privilege escalation via cron jobs. Thu, 07 Nov 2024 00:00:00 GMT souzagabriel.bsb@gmail.com (Gabriel Souza) SQLIRCELinuxHacking Club https://www.netwalker.com.br/blog/math-writeup https://www.netwalker.com.br/blog/math-writeup Application has exposed credentials vulnerability, Function Injection leading to RCE, improper use of eval() in Python, and privilege escalation via verify.py script. Tue, 07 Jan 2025 00:00:00 GMT souzagabriel.bsb@gmail.com (Gabriel Souza) Function InjectionRCELinuxHacking Club https://www.netwalker.com.br/blog/moon-writeup https://www.netwalker.com.br/blog/moon-writeup The application has Remote Code Execution vulnerabilities in Apache APISIX (CVE-2022-24112) and privilege escalation via the SUID binary lua. Fri, 19 Jul 2024 00:00:00 GMT souzagabriel.bsb@gmail.com (Gabriel Souza) CVE-2022-24112LinuxHacking Club https://www.netwalker.com.br/blog/paradize-writeup https://www.netwalker.com.br/blog/paradize-writeup On the Paradize machine, we need to exploit an SQL injection to upload a webshell and explore a path hijacking vulnerability. Sat, 30 Nov 2024 00:00:00 GMT souzagabriel.bsb@gmail.com (Gabriel Souza) SQLILinuxHacking Club https://www.netwalker.com.br/blog/poisoning-writeup https://www.netwalker.com.br/blog/poisoning-writeup The Poisoning machine has an LFI vulnerability exploited with Log Poisoning for RCE execution, followed by privilege escalation using Python with cap_setuid+ep capability for root. Fri, 08 Nov 2024 00:00:00 GMT souzagabriel.bsb@gmail.com (Gabriel Souza) LFIRCELinuxHacking Club https://www.netwalker.com.br/blog/reader-writeup https://www.netwalker.com.br/blog/reader-writeup The Reader machine has SSRF and RFI vulnerabilities that allow RCE and privilege escalation to root via capabilities in the Perl binary. Sat, 29 Jun 2024 00:00:00 GMT souzagabriel.bsb@gmail.com (Gabriel Souza) SSRFRFILinuxHacking Club https://www.netwalker.com.br/blog/renderizer-writeup https://www.netwalker.com.br/blog/renderizer-writeup Exploring an SSTI vulnerability in a live rendering application, it is possible to gain RCE on the server. The privilege escalation involves sudo permissions on logstash. Sat, 13 Jul 2024 00:00:00 GMT souzagabriel.bsb@gmail.com (Gabriel Souza) SSTIRCELinuxHacking Club https://www.netwalker.com.br/blog/saori-writeup https://www.netwalker.com.br/blog/saori-writeup Machine for network traffic analysis and vulnerability exploitation in Ghostscript (CVE-2024-29510). Sat, 27 Jul 2024 00:00:00 GMT souzagabriel.bsb@gmail.com (Gabriel Souza) CVE-2024-29510LinuxHacking Club https://www.netwalker.com.br/blog/vocateer-writeup https://www.netwalker.com.br/blog/vocateer-writeup Máquina sobre Broken Access Control, BOLA, SQL Injection e linux capabilities. Sat, 04 Jan 2025 00:00:00 GMT souzagabriel.bsb@gmail.com (Gabriel Souza) BOLASQLILinuxHacking Club https://www.netwalker.com.br/blog/wallet-writeup https://www.netwalker.com.br/blog/wallet-writeup The application contains vulnerabilities including XXE, RFI, reverse shell, privilege escalation, RCE, cracked password, and unauthorized access to sensitive files. Fri, 28 Feb 2025 00:00:00 GMT souzagabriel.bsb@gmail.com (Gabriel Souza) XXERFILinuxHacking Club