A very detailed and comprehensive walkthrough of HTB Business CTF 2024's  Fullpwn challenge "Submerged". A step-by-step write-up on how to recon, vulnerability research, exploit and post-exploit a Linux server running a vulnerable CMS web app (SPIP 4).

InfoSecWriteUps' platform is  dedicated to providing insights and resources for cybersecurity professionals and enthusiasts. Through articles, tutorials, and security research, InfoSecWriteUps offers insights into cybersecurity vulnerabilities, attack techniques, and defense strategies. Readers can learn about penetration testing, threat intelligence, and incident response to enhance their cybersecurity knowledge and skills.

InfoSec Write-ups

A detailed walkthrough of the HTB Business CTF 2024 Submerged challenge, including the setup, recon activities, exploitation, post-exploitation, and privilege escalation.

HTB Business CTF 2024 — Submerged (Fullpwn)— Write-up