Found improper access control unauthenticated information disclosure, using github poc https://github.com/adhikara13/CVE-2023-23752 After a while enumeration i discovered nmap binary there let me…

InfoSecWriteUps' platform is  dedicated to providing insights and resources for cybersecurity professionals and enthusiasts. Through articles, tutorials, and security research, InfoSecWriteUps offers insights into cybersecurity vulnerabilities, attack techniques, and defense strategies. Readers can learn about penetration testing, threat intelligence, and incident response to enhance their cybersecurity knowledge and skills.

InfoSec Write-ups

A detailed walkthrough of exploiting the Voyage TryHackMe challenge, covering reconnaissance with nmap, exploiting Joomla CVE-2023-23752 for credential disclosure, gaining Docker container access, performing network pivoting to discover internal services, exploiting insecure pickle deserialization in a Flask application for remote code execution, and finally escaping Docker containers using cap_sys_module capability to load malicious kernel modules for root access.

Voyage Tryhackme Writeup

Get Mostafagabr’s stories in your inbox