A simple CTF from TryHackMe that I completed using Nmap, SSH, etc,.

CMS Made Simple CVE-2019-9053 Exploit (Python 3)

Python

Google Dorks for detecting CMS Made Simple < 2.2.10 SQL Injection (CVE-2019-9053). Built for security auditing and patch verification.

Python

First CTF successfully completed! This repo documents my walkthrough of TryHackMe's Simple CTF. It covers network reconnaissance (Nmap), web exploitation (CVE-2019-9053), and credential cracking. As a dev, it was great to pivot from SQLi to a Root shell by leveraging Sudo misconfigurations. Educational purposes only.

Python

A collection of detailed walkthroughs and notes for rooms completed on TryHackMe. This repository documents methodologies, tools, commands, and key learnings from various cybersecurity challenges and labs, intended for educational and practice purposes only.

Python Shell HTML

CMS Simple CVE Recode Script Python 3

Python

None

Python

Fixed CVE-2019-9053

Python

A collection of penetration testing reports demonstrating exploitation of Linux, web, and Windows environments.

Full attack path writeups for retired HTB machines and TryHackMe rooms — enumeration through privilege escalation with real commands and output

Labs Writups

HTML CSS JavaScript

None

None

updated script

Python

This is a modified version of the time-based SQL injection exploit for CMS Made Simple <= 2.2.9. The exploit was originally created by Daniele Scanu and has been updated for better compatibility and modern Python practices.

Python