B2R Monster Corporate Writeup
A boot-to-root writeup for Monster Corporate, covering SMB enumeration, WordPress admin access, plugin RCE, lateral movement with xxd, and cron-based privilege escalation.
Posts
Security notes, lab writeups, CTF lessons, and practical methodology entries from zx10r Security Notes.
Active Directory Lab Notes: Enumeration, Trust Paths, and Privilege Escalation
Notes from building and attacking an Active Directory lab, focused on domain enumeration, trust paths, and escalation patterns.
A Practical Web Exploitation Workflow for CTFs and Labs
A disciplined web testing workflow for mapping application behavior, finding logic flaws, and proving impact cleanly.
My First CTF: Enumeration Lessons That Made Exploitation Click
How my first rooted CTF target taught me to slow down, enumerate carefully, and turn small signals into a full attack path.