https://www.netwalker.com.br/blog en-us souzagabriel.bsb@gmail.com (Gabriel Souza) souzagabriel.bsb@gmail.com (Gabriel Souza) Sat, 22 Mar 2025 00:00:00 GMT https://www.netwalker.com.br/blog/evasion-writeup https://www.netwalker.com.br/blog/evasion-writeup The Evasion machine is vulnerable to LFI with filter bypass, session poisoning for RCE, crontab, and privilege escalation via sudo. Sat, 22 Mar 2025 00:00:00 GMT souzagabriel.bsb@gmail.com (Gabriel Souza) LFILinuxHacking Club https://www.netwalker.com.br/blog/poisoning-writeup https://www.netwalker.com.br/blog/poisoning-writeup The Poisoning machine has an LFI vulnerability exploited with Log Poisoning for RCE execution, followed by privilege escalation using Python with cap_setuid+ep capability for root. Fri, 08 Nov 2024 00:00:00 GMT souzagabriel.bsb@gmail.com (Gabriel Souza) LFIRCELinuxHacking Club https://www.netwalker.com.br/blog/uploader-writeup https://www.netwalker.com.br/blog/uploader-writeup The application has vulnerabilities of Local File Inclusion (LFI), Remote Code Execution (RCE) via Jenkins, and privilege escalation using a SUID binary. Tue, 19 Nov 2024 00:00:00 GMT souzagabriel.bsb@gmail.com (Gabriel Souza) LFIRCELinux