​

WRITE-UPS

Every box tells a story. These are mine: recon to root, nothing skipped.

>
os
tema
nivel
lab
26 / 26
[INE Security] mixed EASY

Assessment Methodologies: Vulnerability Assessment

Imported from Notion: Assessment Methodologies: Vulnerability Assessment

reconvuln-assessment
2026.08.29
[Notion] windows MEDIUM

Weaponizing VBA Macros with MSF

Imported from Notion: Weaponizing VBA Macros with MSF

client-sidemetasploit
2026.08.29
[INE Security] EASY

Web Application Penetration Testing CTF 1

Imported from Notion: Web Application Penetration Testing CTF 1

web
2026.08.29
[INE Security] mixed EASY

Host & Network Penetration Testing: System-Host Based Attacks CTF 1

Imported from Notion: Host & Network Penetration Testing: System-Host Based Attacks CTF 1

exploitationprivesc
2026.08.29
[INE Security] mixed MEDIUM

Host & Network Penetration Testing: System-Host Based Attacks CTF 2

Imported from Notion: Host & Network Penetration Testing: System-Host Based Attacks CTF 2

exploitationprivesc
2026.08.29
[INE Security] mixed HARD

Host & Network Penetration Testing: Exploitation CTF 3

Imported from Notion: Host & Network Penetration Testing: Exploitation CTF 3

exploitation
2026.08.29
[Notion] linux MEDIUM

CVE-2026-41940 (cPanel & WHM)

Imported from Notion: CVE-2026-41940 (cPanel & WHM)

webcveexploitation
2026.08.29
[INE Security] mixed HARD

Network Penetration Testing CTF 1

Imported from Notion: Network Penetration Testing CTF 1

networkrecon
2026.08.29
[INE Security] mixed MEDIUM

Privilege Escalation CTF 1

Imported from Notion: Privilege Escalation CTF 1

privesc
2026.08.29
[INE Security] windows HARD

Active Directory Penetration Testing CTF 1

Imported from Notion: Active Directory Penetration Testing CTF 1

active-directorypost-exploitation
2026.08.29
[INE Security] windows HARD

Lateral Movement & Pivoting CTF 1

Imported from Notion: Lateral Movement & Pivoting CTF 1

pivotingpost-exploitation
2026.08.29
[INE Security] windows MEDIUM

CTF 1: Powershell for Pentesters

Imported from Notion: CTF 1: Powershell for Pentesters

powershellpost-exploitation
2026.08.29
[INE Security] mixed EASY

Assessment Methodologies: Information Gathering CTF 1

Imported from Notion: Assessment Methodologies: Information Gathering CTF 1

recon
2026.08.29
[INE Security] MEDIUM

Web Application Penetration Testing CTF 2

Imported from Notion: Web Application Penetration Testing CTF 2

web
2026.08.29
[INE Security] mixed MEDIUM

Host & Network Penetration Testing: Exploitation CTF 1

Imported from Notion: Host & Network Penetration Testing: Exploitation CTF 1

exploitation
2026.08.29
[INE Security] mixed MEDIUM

Host & Network Penetration Testing: Post-Exploitation CTF 1

Imported from Notion: Host & Network Penetration Testing: Post-Exploitation CTF 1

post-exploitationprivesc
2026.08.29
[INE Security] mixed EASY

Assessment Methodologies: Footprinting and Scanning CTF 1

Imported from Notion: Assessment Methodologies: Footprinting and Scanning CTF 1

recon
2026.08.29
[INE Security] EASY

Web Application Penetration Testing CTF 1

Imported from Notion: Web Application Penetration Testing CTF 1

web
2026.08.29
[INE Security] mixed MEDIUM

Host & Network Penetration Testing: The Metasploit Framework CTF 2

Imported from Notion: Host & Network Penetration Testing: The Metasploit Framework CTF 2

metasploitexploitation
2026.08.29
[INE Security] mixed EASY

Assessment Methodologies: Enumeration CTF 1

Imported from Notion: Assessment Methodologies: Enumeration CTF 1

recon
2026.08.29
[INE Security] mixed MEDIUM

Host & Network Penetration Testing: Exploitation CTF 2

Imported from Notion: Host & Network Penetration Testing: Exploitation CTF 2

exploitation
2026.08.29
[INE Security] mixed MEDIUM

Host & Network Penetration Testing: The Metasploit Framework CTF 1

Imported from Notion: Host & Network Penetration Testing: The Metasploit Framework CTF 1

metasploitexploitation
2026.08.29
[INE Security] mixed MEDIUM

Host & Network Penetration Testing: Post-Exploitation CTF 2

Imported from Notion: Host & Network Penetration Testing: Post-Exploitation CTF 2

post-exploitationprivesc
2026.08.29
[Local Lab] MEDIUM

Lab Web: JWT sin firma robusta

Write-up de laboratorio sobre enumeracion web, revision de tokens y escalada logica hasta panel admin.

web
2026.07.06
[Local Lab] linux HARD

Linux PrivEsc: sudo y PATH contaminado

Escalada local de laboratorio aprovechando un binario ejecutado por sudo con resolucion insegura de PATH.

privesc
2026.07.04
[API Lab] EASY

API Lab: IDOR en recurso privado

Analisis de un fallo de autorizacion horizontal en una API REST de laboratorio.

webapi
2026.07.02