Security Archives - nPm Hacks

TryHackMe Walkthrough – All in One

By nPm December 12, 2025Ethical Hacking, Hacking, Linux, Networking, Python, Security, TryHackMe, Tutorial, Walkthrough

This is a walkthrough of the TryHackMe machine called "All in One". The machine is a linux box running wordpress and this video features the use of wpscan, python exploits, malicious plugins, and GTFOBins! I learned a lot tackling this one. ***SPOILERS*** I show you how to pwn the box,…

Hack the Box Walkthrough – Paper

By nPm December 11, 2025Ethical Hacking, Hacking, HTB, Linux, Networking, Python, Security, Tutorial, Walkthrough

This is a walkthrough of the Hack The Box machine called "Paper". It features the use of exploits to compromise Wordpress and RocketChat, reverse shells, and for the first time ever for me a polkit vulnerability that actually worked. I learned a lot tackling this one. They are obviously making…

Offsec Proving Grounds Walkthrough – Flink

By nPm December 7, 2025Ethical Hacking, Hacking, java, Linux, Networking, Offsec, Security, Tutorial, Walkthrough

📣🆕This is a brand new machine in the Proving Grounds, there are no walkthroughs! This is a walkthrough of OffSec Proving Grounds machine "Flink". It is rated as Intermediate but it was quite tough because java isn't my thing. We take advantage of Apache Flink by uploading a custom malicious…

Offsec Proving Grounds Walkthrough – Bitest

By nPm December 5, 2025Ethical Hacking, Hacking, Javascript, Linux, Networking, Node.js, Offsec, Security, Tutorial, Walkthrough

This is a walkthrough of OffSec Proving Grounds machine "Bitest". It is rated as Intermediate but it was quite difficult and I had to get creative. We start by exploiting rsync and move on to a program called Vitest. Using a very recent exploit poc (2025) we are finally able…

Offsec Proving Grounds Walkthrough – BlackGate

By nPm November 30, 2025Ethical Hacking, Hacking, Linux, Networking, Offsec, Python, Security, Tutorial, Walkthrough

This is a walkthrough of OffSec Proving Grounds machine "BlackGate". It is rated as hard but there are several ways to take advantage of this machine (likely not intended by Offsec). We start by exploiting Redis and privesc using misconfigured SUID setting BUT there are some things you will need…

Offsec Proving Grounds Walkthrough – Press

By nPm November 28, 2025Ethical Hacking, Hacking, Linux, Networking, Offsec, Python, Security, Tutorial, Walkthrough

This is a walkthrough of the OffSec machine called Press. In this video we take advantage of a Flatpress blog and then we privesc using a misconfigured SUID binary. ***SPOILER***Walkthrough of the machine called "Press" in the Offsec Proving Grounds...don't watch unless you want help getting through the machine. https://youtu.be/4iG_qOSldok

Hack the Box Walkthrough – Reset

By nPm November 21, 2025Ethical Hacking, Hacking, HTB, Linux, Networking, Python, Security, Tutorial, Walkthrough

This is a walkthrough of the Hack The Box machine called "Reset". It features the use of Burp Suite to analyze a website password reset, then deliver a payload by injecting it into the Apache2 access.log of the server, then we escalate our privileges by abusing rlogin and tmux .…

Hack the Box Walkthrough – Job

By nPm November 14, 2025Ethical Hacking, Hacking, HTB, Linux, Networking, Security, Tutorial, Walkthrough

🪄This is a walkthrough of the Hack The Box machine called "Job". It features the use of a phishing campaign utilizing malicious .odt LibreOffice files to gain initial access to the machine. We privesc by taking advantage of the impersonate privilege with printspoofer64! I learned a lot tackling this one.…

Offsec Proving Grounds Walkthrough – Codo

By nPm November 10, 2025Ethical Hacking, Hacking, Linux, Networking, Offsec, Python, Security, Tutorial, Walkthrough

This is a walkthrough of the machine called "Codo" in the OffSec Proving Grounds...don't watch unless you want help getting through the machine. This time we take advantage of CodoForum software and bad password practices! Hope this helps someone and enjoy! https://youtu.be/U7H3bMPiS-I

Hack the Box Walkthrough – Beep

By nPm November 7, 2025Ethical Hacking, Hacking, HTB, Linux, Networking, Python, Security, Tutorial, Walkthrough

This is a walkthrough of the Hack The Box machine called "Beep". It features the use of exploits to compromise Elastix/FreePBX, reverse shells, abusing binaries with the SUID set, and much more. I learned a lot tackling this one. You will need to lower your browsers TLS version to be…