Linux Privesc Abusing systemd Services and Timers for Linux Privilege Escalation
How writable unit files, ExecStart hijacks, and timer abuse turn a foothold into root on systemd Linux hosts.
2026-02
Linux Privesc 
Linux Privesc SSH Key Hunting and Lateral Movement on Linux
Find SSH private keys, abuse authorized_keys and known_hosts, and pivot via agent forwarding across Linux hosts.
Linux Privesc Credential Hunting on Linux: From .bash_history to Config Files
A practical guide to hunting cleartext credentials on Linux hosts via history files, config files, and grep, plus defenses.
Linux Privesc Python Library Hijacking for Privilege Escalation on Linux
Abuse writable modules, PYTHONPATH, and sys.path ordering to hijack imports in privileged Python scripts and escalate to root.
Linux Privesc PwnKit: Local Root via polkit pkexec (CVE-2021-4034)
How CVE-2021-4034 (PwnKit) abuses pkexec argv handling and GCONV_PATH to get instant local root on Linux.
Linux Privesc Baron Samedit: Exploiting the sudo Heap Overflow (CVE-2021-3156)
A practical walkthrough of Baron Samedit (CVE-2021-3156), the sudo heap overflow that yields local root, plus detection and defense.
Linux Privesc Linux Persistence Techniques: Maintaining Access After Initial Compromise
A practical tour of Linux persistence: authorized_keys, cron, systemd, rc.local, and ld.so.preload, plus detection.
Linux Privesc Linux Enumeration Cheat Sheet for Privilege Escalation
A practical Linux post-exploitation enumeration cheat sheet covering id, uname -a, sudo -l, SUID hunting, and process inspection.
Web Exploitation SQL Injection: The Complete Guide to UNION and Error-Based Exploitation
A practical guide to UNION-based and error-based SQL injection, payload crafting with information_schema, and blue-team defenses.
Web Exploitation Blind SQL Injection: Boolean-Based and Time-Based Inference Techniques
A practical guide to blind SQL injection: boolean-based and time-based inference, SUBSTRING/SLEEP payloads, and blue-team defenses.
Web Exploitation SQLMap in Practice: From Detection to OS Shell
A practical SQLMap workflow covering request files, database enumeration, data dumping, OS shells, and WAF evasion with tamper scripts.
Web Exploitation Local File Inclusion (LFI) Fundamentals: Path Traversal, /etc/passwd, and Filter Bypasses
A practical introduction to Local File Inclusion: path traversal, reading /etc/passwd, null byte tricks, and PHP filter bypasses, plus defenses.
Security Remote File Inclusion (RFI) Fundamentals: From allow_url_include to RCE
Learn how Remote File Inclusion abuses PHP wrappers and allow_url_include to achieve remote code execution, plus blue-team defenses.
Web Exploitation From LFI to RCE: Practical Escalation Techniques
How to escalate a PHP Local File Inclusion into remote code execution via log poisoning, php://filter, data wrappers, sessions and /proc.