HTB: DevArea
Medium Linux box. SOAP XOP/MTOM file read leaks Hoverfly creds from a systemd unit file. Middleware RCE gives a shell as dev_ryan. World-writable /usr/bin/bash + sudo syswatch.sh = root.
What I did: Architected and deployed scalable enterprise IT infrastructures.
What I do now: Secure critical networks, lead and develop Mindflow.care as founder.
What I love to do: Security research, custom tools, CTFs, lab from HTB/THM and anime.
// Writing
Medium Linux box. SOAP XOP/MTOM file read leaks Hoverfly creds from a systemd unit file. Middleware RCE gives a shell as dev_ryan. World-writable /usr/bin/bash + sudo syswatch.sh = root.
Git leak to portal creds. fontTools arbitrary file write drops a webshell, FontForge ZIP command injection pivots to user, setuptools path traversal writes root's SSH key. Three CVEs, full chain.
// Credentials
// Contact
Open to collaborations and security research.
// contact.channels[]
CISSP Study Resources