Skip to main content

Documentation Index

Fetch the complete documentation index at: https://rootea.es/llms.txt

Use this file to discover all available pages before exploring further.

Backend

··
Operating systemLinux
DifficultyMedium
IP10.10.11.161
Retirement date
SkillsAPI Enumeration Abusing API - Registering a new user Abusing API Logging in as the created user Enumerating FastAPI EndPoints through Docs Abusing FastAPI - We managed to change the admin password Abusing FastAPI We get the ability to read files from the machine (Source Analysis) Creating our own privileged JWT Abusing FastAPI - We achieved remote command execution through the exec endpoint Information Leakage (Privilege Escalation)

Writeups

LanguageAuthorFormatLink
🇪🇸 ESS4vitarVídeoOpen
🇬🇧 EN0xdfTextoOpen
🇬🇧 ENIppSecVídeoOpen

Skill resources

Curated documentation for each technique listed in the Skills column above. Sources: HackTricks, GTFOBins, PortSwigger, etc.
SkillSourceLink
Remote Code Execution (RCE)HackTricksOpen