https://scarryparrot.github.io/ayush, prajapati, blog , writeup 2026-03-04T14:08:06+00:00 Ayush Prajapati https://scarryparrot.github.io/ Jekyll © 2026 Ayush Prajapati /assets/img/favicons/favicon.ico /assets/img/favicons/favicon-96x96.png 2025-07-26T00:00:00+00:00 2025-07-26T00:00:00+00:00 https://scarryparrot.github.io/posts/HackTheBox-Artificial/ Ayush Prajapati

This was a linux machine. We found 2 ports 22 and 80 were open. The user shell was quite straightforward. We needed to find tensorflow exploit and gain RCE. After getting a user shell we found local port 9898 running and a username and a password in the backup config file. After logging in we need to setup environment variables to excute command as root. So starting with nmap scan. We found ...

2025-07-26T00:00:00+00:00 2025-07-26T00:00:00+00:00 https://scarryparrot.github.io/posts/TryHackMe-WhiteRose/ Ayush Prajapati

This is an easy machine from TryHackMe. We started with nmap and found 22 and 80 as open ports. Doing a subdomain enumeration we found a misconfiguration exploiting which we gained password for other user. Logging in we exploited an ejs injection vulnerability leading to RCE. For the root part exploiting a misconfigured sudoeditor file we get the root flag. Starting off with rustscan we find p...

2025-07-24T00:00:00+00:00 2025-07-25T23:28:27+00:00 https://scarryparrot.github.io/posts/HackTheBox-Fluffy/ Ayush Prajapati

This was a windows box, rated Easy on HTB, pretty straightforward I would say. Beginning with nmap we found smb service, login with creds that were given , we found a pdf with some listed vulnerabilities. We identified one of the CVE, CVE-2025-24071, which resided in .library-ms file. We captured the hash using responder and with the new creds ran Bloodhound-py. Then using Certipy we were able...