Docker on Th3B0yWh0L1v3d — Security Writeups

Docker on Th3B0yWh0L1v3d — Security Writeups https://th3b0ywh0l1v3d.github.io/tags/docker/ Recent content in Docker on Th3B0yWh0L1v3d — Security Writeups Hugo en-us Tue, 16 Jun 2026 00:00:00 +0000 Boro Senpai 2 https://th3b0ywh0l1v3d.github.io/ctf/boroctf-2026/web/boro-senpai-2/ Tue, 16 Jun 2026 00:00:00 +0000 https://th3b0ywh0l1v3d.github.io/ctf/boroctf-2026/web/boro-senpai-2/ Part 2 of the Boro Senpai series: SSRF via Docker internal hostname. Neural Sync Portal https://th3b0ywh0l1v3d.github.io/ctf/boroctf-2026/web/neural-sync-portal/ Tue, 16 Jun 2026 00:00:00 +0000 https://th3b0ywh0l1v3d.github.io/ctf/boroctf-2026/web/neural-sync-portal/ SSRF via Docker internal hostname to reach the metadata service and retrieve the flag. Robots — TryHackMe https://th3b0ywh0l1v3d.github.io/thm/robots/ Mon, 08 Jun 2026 00:00:00 +0000 https://th3b0ywh0l1v3d.github.io/thm/robots/ XSS in a registration form exfiltrates the admin’s session cookie; RFI via the admin URL-tester gives www-data code execution; double-MD5 cracking yields SSH access, and a sudo apache2 logging trick writes a root SSH key.