https://www.netwalker.com.br/blog en-us souzagabriel.bsb@gmail.com (Gabriel Souza) souzagabriel.bsb@gmail.com (Gabriel Souza) Sun, 17 Nov 2024 00:00:00 GMT https://www.netwalker.com.br/blog/convert-writeup https://www.netwalker.com.br/blog/convert-writeup The application has remote code execution (RCE) vulnerabilities in the ReportLab library and privilege escalation via "Shared Library Hijacking". Sun, 17 Nov 2024 00:00:00 GMT souzagabriel.bsb@gmail.com (Gabriel Souza) CVE-2023-33733RCELinuxHacking Club https://www.netwalker.com.br/blog/forged-writeup https://www.netwalker.com.br/blog/forged-writeup The application is vulnerable to JWT token forgery, remote code execution (RCE), and privilege escalation via slo-generator. Sat, 15 Feb 2025 00:00:00 GMT souzagabriel.bsb@gmail.com (Gabriel Souza) RCELinuxHacking Club https://www.netwalker.com.br/blog/lion-writeup https://www.netwalker.com.br/blog/lion-writeup The Lion machine is vulnerable to SQL injection, allowing RCE through the upload of a webshell, and has privilege escalation via cron jobs. Thu, 07 Nov 2024 00:00:00 GMT souzagabriel.bsb@gmail.com (Gabriel Souza) SQLIRCELinuxHacking Club https://www.netwalker.com.br/blog/math-writeup https://www.netwalker.com.br/blog/math-writeup Application has exposed credentials vulnerability, Function Injection leading to RCE, improper use of eval() in Python, and privilege escalation via verify.py script. Tue, 07 Jan 2025 00:00:00 GMT souzagabriel.bsb@gmail.com (Gabriel Souza) Function InjectionRCELinuxHacking Club https://www.netwalker.com.br/blog/poisoning-writeup https://www.netwalker.com.br/blog/poisoning-writeup The Poisoning machine has an LFI vulnerability exploited with Log Poisoning for RCE execution, followed by privilege escalation using Python with cap_setuid+ep capability for root. Fri, 08 Nov 2024 00:00:00 GMT souzagabriel.bsb@gmail.com (Gabriel Souza) LFIRCELinuxHacking Club https://www.netwalker.com.br/blog/renderizer-writeup https://www.netwalker.com.br/blog/renderizer-writeup Exploring an SSTI vulnerability in a live rendering application, it is possible to gain RCE on the server. The privilege escalation involves sudo permissions on logstash. Sat, 13 Jul 2024 00:00:00 GMT souzagabriel.bsb@gmail.com (Gabriel Souza) SSTIRCELinuxHacking Club https://www.netwalker.com.br/blog/uploader-writeup https://www.netwalker.com.br/blog/uploader-writeup The application has vulnerabilities of Local File Inclusion (LFI), Remote Code Execution (RCE) via Jenkins, and privilege escalation using a SUID binary. Tue, 19 Nov 2024 00:00:00 GMT souzagabriel.bsb@gmail.com (Gabriel Souza) LFIRCELinux