---

Welcome To My Cyber Security Blog, Hacker

---

Hey You, Yes You, Welcome To My Cyber Security Blog My Name is Muzec I Posts Different Hacking Tricks, Writeups, Articles, Any Stuffs Related To Hacking… I’m Happy You’re Here Mate.

---

WhoAmI:~#

---

• My Name: Saminu Musa Saminu
• Known as: Muzec
• What Do I Do: CTF / Red Teaming / Ethical Hacking
• Twitter: https://twitter.com/muzec_saminu
• GitHub: https://github.com/Muzec0318

---

Latest_Articles:~#

---

• [[Mar 11, 2022]] DirtyPipe (DirtyCow Reloaded) - Local Privilege Escalation - CVE-2022-0847 (POC)
• [[Jan 27, 2022]] Polkit Pkexec (PwnKit) - Local Privilege Escalation - CVE-2021-4034 (POC)
• [[Nov 21, 2021]] All About Payloads Cheat Sheet For XXE,LFI,RFI,SSTI,SSRF
• [[Nov 01, 2021]] Exploiting Cross-site Scripting To Steal Cookies
• [[Oct 30, 2021]] Penetration Testing With Nessus To Perform A Vulnerability Scan Against A Target
• [[Jun 01, 2021]] FOGProject 1.5.9 - File Upload RCE (Authenticated) - (POC)
• [[Apr 30, 2021]] OverlayFS - Local Privilege Escalation - CVE-2021-3493 (POC)
• [[Apr 20, 2021]] OS Command Injection Attacks
• [[Apr 08, 2021]] Exploiting Telnet To Gain A Reverse Shell
• [[Apr 07, 2021]] Buffer Overflow Cheat Sheet
• [[Jul 01, 2020]] Spawning A TTY Shell, Cheat Sheets
• [[Jul 01, 2020]] Reverse Shell Cheat Sheet

---

RedTeaming_PlayGrounds:~#

---

-

---

TryHackMe_Writeups:~#

---

• [[Jul 12, 2022]] TryHackMe – committed git
• [[Apr 02, 2022]] TryHackMe – 0x41haz Reverse engineering, Ghidra
• [[Feb 19, 2022]] TryHackMe – Flatline Freeswitch exploit, SeImpersonatePrivilege
• [[Feb 19, 2022]] TryHackMe – Git and Crumpets v12 Gitea RCE, DB Exploiting
• [[Jan 18, 2022]] TryHackMe – Exploiting Log4j log4j, Log4shell, Java 8, CVE-2021-44228
• [[Sep 23, 2021]] TryHackMe – Empline Ruby Capabilities With Chown
• [[Jul 19, 2021]] TryHackMe – Ustoun Active Directory, mssqlclient.py
• [[Jul 12, 2021]] TryHackMe – VulnNet Roasted Active Directory
• [[Jul 01, 2021]] TryHackMe – Couch CouchDB Docker
• [[May 05, 2021]] TryHackMe – VulnNet Internal Redis, rsync & TeamCity
• [[Feb 20, 2021]] TryHackMe – Watcher Python Library Hijacking
• [[Apr 05, 2021]] TryHackMe – Gatekeeper BOF
• [[Mar 31, 2021]] TryHackMe – Debug PHP Deserialization
• [[Mar 10, 2021]] TryHackMe – Tokyo Ghoul Python Jail
• [[Oct 20, 2020]] TryHackMe – The Server From Hell
• [[Oct 15, 2020]] TryHackMe – 0day Shellshock
• [[Oct 10, 2020]] TryHackMe – The Marketplace SQL Injection & XSS
• [[Oct 05, 2020]] TryHackMe – Revenge SQLMAP
• [[Oct 01, 2020]] TryHackme – Mnemonic
• [[Sep 08, 2020]] TryHackMe – Ghizer CTF
• [[Aug 10, 2020]] TryHackMe – Blog Wordpress
• [[Jul 28, 2020]] TryHackMe – Brooklyn 99
• [[Jul 25, 2020]] TryHackMe – Overpass
• [[Jul 09, 2020]] TryHackMe – Source Webmin Exploit
• [[Jul 17, 2020]] TryHackMe – JoyStick
• [[Jun 28, 2020]] TryHackMe – Jack Of All Trades Steghide

---

VulnHubs_Writeups:~#

---

• [[Mar 10, 2022]] VulnHub – Symfonos 5 Ldap, LFI, ldapsearch
• [[Mar 04, 2022]] VulnHub – Symfonos 2 ProFTPD 1.3.5, Port Forwarding, LibreNMS RCE
• [[Mar 03, 2022]] VulnHub – Symfonos 1 SMTP 2 RCE, Path Variable
• [[Sep 30, 2021]] VulnHub – Blackwidow LFI Fuzzing With FFUF
• [[Sep 30, 2021]] VulnHub – Os-ByteSec SMB, Path Variable
• [[Sep 27, 2021]] VulnHub – Hackademic.RTB2 SQL Injection, Port Knocking
• [[Jul 28, 2021]] VulnHub – Haclabs NoName
• [[Jul 16, 2021]] VulnHub – Lin.Security NFS
• [[Jul 15, 2021]] VulnHub – HackLab: Vulnix NFS
• [[Jun 24, 2021]] VulnHub – Pluck TFTP
• [[Jun 06, 2021]] VulnHub – Lord Of The Root Port Knocking
• [[Jun 05, 2021]] VulnHub – Sar
• [[Jun 01, 2021]] VulnHub – DC 9 Port Knocking
• [[May 31, 2021]] VulnHub – Insomnia
• [[May 30, 2021]] VulnHub – Gaara
• [[May 29, 2021]] VulnHub – System Failure Reverse Passwordlist With Hydra
• [[May 29, 2021]] VulnHub – Raven 2 PHPMailer & MySQL 4.x/5.0 Exploit
• [[May 28, 2021]] VulnHub – Android4 Android OS
• [[May 24, 2021]] VulnHub – Momentum AES-decrypt
• [[May 23, 2021]] VulnHub – Covfefe BOF
• [[May 22, 2021]] VulnHub – VulnOSv2 Drupal Exploit
• [[May 20, 2021]] VulnHub – DC1 Drupal Exploit
• [[May 18, 2021]] VulnHub – DC2 Restricted rbash Shell
• [[May 27, 2021]] VulnHub – DC5 LFI To RCE
• [[May 12, 2021]] VulnHub – Stapler Doubleput_exploit
• [[Apr 29, 2021]] VulnHub – DroopyCTF Drupal Exploit
• [[Apr 18, 2021]] VulnHub – Wakanda 1 LFI With PHP Wrapper Filter
• [[Apr 16, 2021]] VulnHub – Me And My Girlfriend 1 Account Takeover
• [[Apr 14, 2021]] VulnHub – Inclusiveness PATH Variable With Whoami
• [[Apr 08, 2021]] VulnHub – SunsetNoontide IRC
• [[Mar 30, 2021]] VulnHub – FunboxEasyEnum Webshell
• [[Mar 28, 2021]] VulnHub – Zico2
• [[Mar 26, 2021]] VulnHub – EVM
• [[Mar 25, 2021]] VulnHub – FunboxEasy
• [[Mar 24, 2021]] VulnHub – Kioptrix 1 Samba Trans2open
• [[Mar 22, 2021]] VulnHub – Kioptrix 2 SQL Injection
• [[Mar 20, 2021]] VulnHub – Kioptrix 3 RCE
• [[Mar 18, 2021]] VulnHub – Kioptrix 4 SQL Injection
• [[Mar 14, 2021]] VulnHub – SickOs 1.1 Squid Proxy
• [[Mar 12, 2021]] VulnHub – SickOs 1.2 Http-Method
• [[Mar 11, 2021]] VulnHub – Toppo
• [[Apr 07, 2021]] VulnHub – BlueMoon
• [[Mar 10, 2021]] VulnHub – Tr0ll 1 Crontab
• [[Apr 10, 2021]] VulnHub – Brainpan 1 BOF

---

PortSwigger_Labs:~#

---

• [[Dec 15, 2021]] PortSwigger – SQL Injection

---

PwnTillDawn_Writeups:~#

---

• [[Jun 30, 2021]] Juno Reverse APK, Mobsf
• [[Jun 09, 2021]] FullMounty NFS
• [[Jun 14, 2021]] Stuntman Mike
• [[Jun 15, 2021]] Django Windows Box

---

HackTheBox_Writeups:~#

---

• [[Mar 01, 2022]] Acute AD, Windows
• [[Feb 17, 2022]] Search AD, ldapsearch, Crackmapexec, Kerberoasting, Excel, BloodHound
• [[Jan 02, 2022]] Timing LFI, PHP code review, Bypasses to gain admin, Sudo, Cronjob
• [[Jan 01, 2022]] Horizontall Strapi RCE, Chisel Port Forward, Laravel 8 RCE
• [[Dec 02, 2021]] Driver Forced Authentication Responder Printer CVE-2021-34527
• [[Nov 26, 2021]] Backdoor Wordpress, Gdbserver 9.2 RCE, Screen
• [[Sep 08, 2021]] Gobox Go SSTI & ngx_http_execute_module.so
• [[May 25, 2021]] Templated SSTI
• [[May 23, 2021]] Knife PHP 8.1.0-dev Backdoor RCE
• [[Apr 30, 2021]] ScriptKiddie overlayfs
• [[Jul 02, 2021]] Shocker
• [[Jul 02, 2021]] Active Active Directory
• [[Jul 06, 2021]] Bastion Mounting VHD
• [[Jul 07, 2021]] Heist Windows Box
• [[Jul 10, 2021]] Forest Active Directory
• [[Jul 14, 2021]] OpenAdmin OpenNetAdmin 18.1.1

---

Proving_Grounds_Writeups:~#

---

• [[NOV 28, 2021]] Kevin
• [[NOV 28, 2021]] Peppo Ident, Docker images
• [[Jul 23, 2021]] Shakabrah
• [[Mar 30, 2022]] Potato PHP strcmp
• [[Mar 31, 2021]] Assertion101 Assert LFI

---

HackMyVm_Writeups:~#

---

• [[NOV 15, 2021]] Condor CGI Tricks
• [[NOV 03, 2021]] Level Port Forwarding
• [[Oct 22, 2021]] Pwned
• [[Oct 22, 2021]] Hommie Hijacking Path Variable
• [[Oct 22, 2021]] Noob
• [[Oct 18, 2021]] May Brute Forcing, Webmin Conf
• [[Oct 03, 2021]] Video-Club CMD Fuzzing With FFUF
• [[Oct 01, 2021]] DriftingBlues 6
• [[Jun 07, 2021]] Ripper Crontab
• [[Jun 07, 2021]] Gift
• [[Jun 08, 2021]] Dominator Rot13

---

CTF_Writeups:~#

---

• [[Jun 15, 2022]] Ilyasehacker
• [[May 14, 2022]] CysecNG CTF 2022
• [[Apr 17, 2022]] Th3 Hacker News B’darija CTF 2022
• [[Aug 29, 2021]] abcccyberhackathon CTF 2021
• [[May 16, 2021]] dCTF 2021 CTF
• [[Mar 12, 2021]] zSecurity Fuel CTF
• [[Feb 07, 2021]] zSecurity Cute CTF

---

echoCTF.RED_Writeups:~#

---

• [[Dec 07, 2021]] PcPrincipal GilaCMS, ETCD, CONFD
• [[Dec 04, 2021]] CVE-2020-7247 OpenSMTPD RCE
• [[Dec 04, 2021]] Cupidme Upload Insecure Files, MagicBytes, OpenSMTPD RCE
• [[Dec 03, 2021]] Nopal Cacti RCE, SNMP, Snmpwalk
• [[Dec 03, 2021]] Anvil Privilege Escalation

---

Support Or Contact Me:~#

---

Hey You, Having Any Issues With My Writeups, Articles Send Me A DM on Twitter Muzec Am Alawys Free To Help……