Skip to main content

Documentation Index

Fetch the complete documentation index at: https://rootea.es/llms.txt

Use this file to discover all available pages before exploring further.

Flujab

··
Operating systemLinux
DifficultyHard
IP10.10.10.124
Retirement date
SkillsSSL Cert Enumeration Cookies Manipulation - Gaining access to restricted areas of the site Abusing Mailer Configuration Mail server hijacking - Intercepting mails with Python SQLI (SQL Injection) - Error based in registered patient cancelation form Gaining access as the ‘sysadm’ user to an Ajenti panel Ajenti Server Management System Exploitation Ajenti Exploitation - Creating an authorized public key on the server Assigning file permissions through the API Managing authorized access through the ‘hosts.allow’ file Escaping Restricted Bash (rbash) Abusing SUID Binary (GNU Screen) [Privilege Escalation]

Writeups

LanguageAuthorFormatLink
🇪🇸 ESS4vitarVídeoOpen
🇬🇧 EN0xdfTextoOpen
🇬🇧 ENIppSecVídeoOpen

Skill resources

Curated documentation for each technique listed in the Skills column above. Sources: HackTricks, GTFOBins, PortSwigger, etc.
SkillSourceLink
SQL InjectionHackTricksOpen
SUID binariesGTFOBinsOpen
Remote Code Execution (RCE)HackTricksOpen