https://www.wh01s17.com/blog Writeups de CTF y notas de explotación de vulnerabilidades por wh01s17. es Wed, 08 Jul 2026 03:51:06 GMT https://www.wh01s17.com/blog/144-coolpg https://www.wh01s17.com/blog/144-coolpg Tue, 07 Jul 2026 00:00:00 GMT writeup 144 - CoolPG — writeup, hacking, CTF, cybersecurity, Linux https://www.wh01s17.com/blog/lanzamiento-sudo-aprende https://www.wh01s17.com/blog/lanzamiento-sudo-aprende Sat, 27 Jun 2026 00:00:00 GMT article Lancé sudo-aprende, un laboratorio interactivo para aprender GNU/Linux, Git y fundamentos de ciberseguridad practicando desde una terminal guiada: ejercicios con feedback inmediato, labs de pentesting, XP, logros y un ranking comunitario. En este post te cuento qué puedes hacer dentro y cómo empezar sin necesidad de crear una cuenta. https://www.wh01s17.com/blog/ffmpeg-hls-local-file-read-cve-2016-1897 https://www.wh01s17.com/blog/ffmpeg-hls-local-file-read-cve-2016-1897 Sat, 20 Jun 2026 00:00:00 GMT vuln FFmpeg HLS Local File Read (CVE-2016-1897) — vulnerability, hacking, cybersecurity, FFmpeg, SSRF https://www.wh01s17.com/blog/php-cgi-argument-injection-cve-2024-4577 https://www.wh01s17.com/blog/php-cgi-argument-injection-cve-2024-4577 Sat, 20 Jun 2026 00:00:00 GMT vuln PHP CGI Argument Injection (CVE-2024-4577) — vulnerability, hacking, cybersecurity, PHP, RCE https://www.wh01s17.com/blog/zipcrypto-known-plaintext-attack-bkcrack https://www.wh01s17.com/blog/zipcrypto-known-plaintext-attack-bkcrack Sat, 20 Jun 2026 00:00:00 GMT vuln ZipCrypto Known-Plaintext Attack (bkcrack) — vulnerability, hacking, cybersecurity, crypto, zip https://www.wh01s17.com/blog/active-directory-windows-ad https://www.wh01s17.com/blog/active-directory-windows-ad Fri, 19 Jun 2026 00:00:00 GMT vuln Active Directory (Windows AD) — vulnerability, hacking, cybersecurity, Windows, ActiveDirectory https://www.wh01s17.com/blog/apache-path-traversal-rce-cve-2021-41773 https://www.wh01s17.com/blog/apache-path-traversal-rce-cve-2021-41773 Thu, 18 Jun 2026 00:00:00 GMT vuln Apache Path Traversal RCE (CVE-2021-41773) — vulnerability, hacking, cybersecurity, Apache, path-traversal https://www.wh01s17.com/blog/cups-rce-evil-cups-cve-2024-47177 https://www.wh01s17.com/blog/cups-rce-evil-cups-cve-2024-47177 Thu, 18 Jun 2026 00:00:00 GMT vuln CUPS RCE (evil-cups CVE-2024-47177) — vulnerability, hacking, cybersecurity, CUPS, IPP https://www.wh01s17.com/blog/dns-zone-transfer-axfr https://www.wh01s17.com/blog/dns-zone-transfer-axfr Thu, 18 Jun 2026 00:00:00 GMT vuln DNS Zone Transfer (AXFR) — vulnerability, hacking, cybersecurity, DNS, AXFR https://www.wh01s17.com/blog/debian-openssl-predictable-prng-cve-2008-0166 https://www.wh01s17.com/blog/debian-openssl-predictable-prng-cve-2008-0166 Thu, 18 Jun 2026 00:00:00 GMT vuln Debian OpenSSL Predictable PRNG (CVE-2008-0166) — vulnerability, hacking, cybersecurity, OpenSSL, SSH https://www.wh01s17.com/blog/dirty-cow-cve-2016-5195 https://www.wh01s17.com/blog/dirty-cow-cve-2016-5195 Thu, 18 Jun 2026 00:00:00 GMT vuln Dirty COW (CVE-2016-5195) — vulnerability, hacking, cybersecurity, privesc, kernel https://www.wh01s17.com/blog/dirty-pipe-cve-2022-0847 https://www.wh01s17.com/blog/dirty-pipe-cve-2022-0847 Thu, 18 Jun 2026 00:00:00 GMT vuln Dirty Pipe (CVE-2022-0847) — vulnerability, hacking, cybersecurity, privesc, kernel https://www.wh01s17.com/blog/exposed-git-repository https://www.wh01s17.com/blog/exposed-git-repository Thu, 18 Jun 2026 00:00:00 GMT vuln Exposed .git Repository — vulnerability, hacking, cybersecurity, git, web https://www.wh01s17.com/blog/jenkins-script-console-rce https://www.wh01s17.com/blog/jenkins-script-console-rce Thu, 18 Jun 2026 00:00:00 GMT vuln Jenkins Script Console RCE — vulnerability, hacking, cybersecurity, Jenkins, Groovy https://www.wh01s17.com/blog/linux-capabilities-privesc https://www.wh01s17.com/blog/linux-capabilities-privesc Thu, 18 Jun 2026 00:00:00 GMT vuln Linux Capabilities Privesc — vulnerability, hacking, cybersecurity, privesc, capabilities https://www.wh01s17.com/blog/looney-tunables-cve-2023-4911 https://www.wh01s17.com/blog/looney-tunables-cve-2023-4911 Thu, 18 Jun 2026 00:00:00 GMT vuln Looney Tunables (CVE-2023-4911) — vulnerability, hacking, cybersecurity, privesc, glibc https://www.wh01s17.com/blog/ms08-067-cve-2008-4250 https://www.wh01s17.com/blog/ms08-067-cve-2008-4250 Thu, 18 Jun 2026 00:00:00 GMT vuln MS08-067 (CVE-2008-4250) — vulnerability, hacking, cybersecurity, Windows, SMB https://www.wh01s17.com/blog/ms17-010-eternalblue-cve-2017-0143 https://www.wh01s17.com/blog/ms17-010-eternalblue-cve-2017-0143 Thu, 18 Jun 2026 00:00:00 GMT vuln MS17-010 EternalBlue (CVE-2017-0143) — vulnerability, hacking, cybersecurity, Windows, SMB https://www.wh01s17.com/blog/nfs-no_root_squash-privesc https://www.wh01s17.com/blog/nfs-no_root_squash-privesc Thu, 18 Jun 2026 00:00:00 GMT vuln NFS no_root_squash Privesc — vulnerability, hacking, cybersecurity, privesc, NFS https://www.wh01s17.com/blog/path-hijacking https://www.wh01s17.com/blog/path-hijacking Thu, 18 Jun 2026 00:00:00 GMT vuln PATH Hijacking — vulnerability, hacking, cybersecurity, privesc, PATH https://www.wh01s17.com/blog/php-810-dev-backdoor-user-agentt-rce https://www.wh01s17.com/blog/php-810-dev-backdoor-user-agentt-rce Thu, 18 Jun 2026 00:00:00 GMT vuln PHP 8.1.0-dev Backdoor (User-Agentt RCE) — vulnerability, hacking, cybersecurity, PHP, backdoor https://www.wh01s17.com/blog/php-filter-chains-rce https://www.wh01s17.com/blog/php-filter-chains-rce Thu, 18 Jun 2026 00:00:00 GMT vuln PHP Filter Chains RCE — vulnerability, hacking, cybersecurity, PHP, LFI https://www.wh01s17.com/blog/privileged-groups-privesc https://www.wh01s17.com/blog/privileged-groups-privesc Thu, 18 Jun 2026 00:00:00 GMT vuln Privileged Groups Privesc — vulnerability, hacking, cybersecurity, privesc, groups https://www.wh01s17.com/blog/pwnkit-pkexec-cve-2021-4034 https://www.wh01s17.com/blog/pwnkit-pkexec-cve-2021-4034 Thu, 18 Jun 2026 00:00:00 GMT vuln PwnKit pkexec (CVE-2021-4034) — vulnerability, hacking, cybersecurity, privesc, polkit https://www.wh01s17.com/blog/redis-unauthorized-access-rce https://www.wh01s17.com/blog/redis-unauthorized-access-rce Thu, 18 Jun 2026 00:00:00 GMT vuln Redis Unauthorized Access RCE — vulnerability, hacking, cybersecurity, Redis, RCE https://www.wh01s17.com/blog/shellshock-cve-2014-6271 https://www.wh01s17.com/blog/shellshock-cve-2014-6271 Thu, 18 Jun 2026 00:00:00 GMT vuln Shellshock (CVE-2014-6271) — vulnerability, hacking, cybersecurity, Shellshock, RCE https://www.wh01s17.com/blog/tar-wildcard-injection https://www.wh01s17.com/blog/tar-wildcard-injection Thu, 18 Jun 2026 00:00:00 GMT vuln Tar Wildcard Injection — vulnerability, hacking, cybersecurity, privesc, tar https://www.wh01s17.com/blog/tomcat-manager-war-deploy-rce https://www.wh01s17.com/blog/tomcat-manager-war-deploy-rce Thu, 18 Jun 2026 00:00:00 GMT vuln Tomcat Manager WAR Deploy RCE — vulnerability, hacking, cybersecurity, Tomcat, WAR https://www.wh01s17.com/blog/unrealircd-backdoor-cve-2010-2075 https://www.wh01s17.com/blog/unrealircd-backdoor-cve-2010-2075 Thu, 18 Jun 2026 00:00:00 GMT vuln UnrealIRCd Backdoor (CVE-2010-2075) — vulnerability, hacking, cybersecurity, UnrealIRCd, IRC https://www.wh01s17.com/blog/writable-critical-files-privesc https://www.wh01s17.com/blog/writable-critical-files-privesc Thu, 18 Jun 2026 00:00:00 GMT vuln Writable Critical Files Privesc — vulnerability, hacking, cybersecurity, privesc, Linux https://www.wh01s17.com/blog/rsync-anonymous-access https://www.wh01s17.com/blog/rsync-anonymous-access Thu, 18 Jun 2026 00:00:00 GMT vuln rsync Anonymous Access — vulnerability, hacking, cybersecurity, rsync, enumeration https://www.wh01s17.com/blog/143-hunter https://www.wh01s17.com/blog/143-hunter Sat, 29 Nov 2025 00:00:00 GMT writeup 143 - Hunter — writeup, hacking, CTF, cybersecurity, Linux https://www.wh01s17.com/blog/smb-server-message-blocks https://www.wh01s17.com/blog/smb-server-message-blocks Wed, 12 Nov 2025 00:00:00 GMT vuln SMB Enum — SMB, enum, cybersecurity, hacking https://www.wh01s17.com/blog/014-homelab https://www.wh01s17.com/blog/014-homelab Sun, 09 Nov 2025 00:00:00 GMT writeup 014 - HomeLab — writeup, hacking, CTF, cybersecurity, Linux https://www.wh01s17.com/blog/35-build https://www.wh01s17.com/blog/35-build Sun, 09 Nov 2025 00:00:00 GMT writeup 35 - Build — writeup, hacking, CTF, cybersecurity, Windows https://www.wh01s17.com/blog/xst-cross-site-tracing https://www.wh01s17.com/blog/xst-cross-site-tracing Sun, 09 Nov 2025 00:00:00 GMT vuln XST (Cross-Site Tracing) — vulnerability, hacking, web, XST, cybersecurity https://www.wh01s17.com/blog/xforwardedfor-header-spoofing https://www.wh01s17.com/blog/xforwardedfor-header-spoofing Sun, 09 Nov 2025 00:00:00 GMT vuln Forward headers — HTTP, spoofing, web, hacking, cybersecurity https://www.wh01s17.com/blog/31-lower4 https://www.wh01s17.com/blog/31-lower4 Sat, 08 Nov 2025 00:00:00 GMT writeup 31 - Lower4 — writeup, hacking, CTF, cybersecurity, Linux https://www.wh01s17.com/blog/32-lower5 https://www.wh01s17.com/blog/32-lower5 Sat, 08 Nov 2025 00:00:00 GMT writeup 32 - Lower5 — writeup, hacking, CTF, cybersecurity, Linux https://www.wh01s17.com/blog/33-lower6 https://www.wh01s17.com/blog/33-lower6 Sat, 08 Nov 2025 00:00:00 GMT writeup 33 - Lower6 — writeup, hacking, CTF, cybersecurity, Linux https://www.wh01s17.com/blog/34-lower7 https://www.wh01s17.com/blog/34-lower7 Sat, 08 Nov 2025 00:00:00 GMT writeup 34 - Lower7 — writeup, hacking, CTF, cybersecurity, Linux https://www.wh01s17.com/blog/142-sysadmin https://www.wh01s17.com/blog/142-sysadmin Mon, 27 Oct 2025 00:00:00 GMT writeup 142 - Sysadmin — writeup, hacking, CTF, cybersecurity, Linux https://www.wh01s17.com/blog/28-lower2 https://www.wh01s17.com/blog/28-lower2 Sat, 25 Oct 2025 00:00:00 GMT writeup 28 - Lower2 — writeup, hacking, CTF, cybersecurity, Linux https://www.wh01s17.com/blog/29-lower3 https://www.wh01s17.com/blog/29-lower3 Sat, 25 Oct 2025 00:00:00 GMT writeup 29 - Lower3 — writeup, hacking, CTF, cybersecurity, Linux https://www.wh01s17.com/blog/30-loweb https://www.wh01s17.com/blog/30-loweb Sat, 25 Oct 2025 00:00:00 GMT writeup 30 - Loweb — writeup, hacking, CTF, cybersecurity, Linux https://www.wh01s17.com/blog/idor-insecure-direct-object-reference https://www.wh01s17.com/blog/idor-insecure-direct-object-reference Fri, 24 Oct 2025 00:00:00 GMT vuln IDOR — IDOR https://www.wh01s17.com/blog/013-blackhat-2 https://www.wh01s17.com/blog/013-blackhat-2 Thu, 16 Oct 2025 00:00:00 GMT writeup 013 - BlackHat 2 — writeup, hacking, CTF, cybersecurity, Linux https://www.wh01s17.com/blog/xxe-injection-full-guide-v3 https://www.wh01s17.com/blog/xxe-injection-full-guide-v3 Thu, 16 Oct 2025 00:00:00 GMT vuln XXE Injection full guide v3 — nota https://www.wh01s17.com/blog/140-aria https://www.wh01s17.com/blog/140-aria Tue, 07 Oct 2025 00:00:00 GMT writeup 140 - Aria — writeup, hacking, CTF, cybersecurity, Linux https://www.wh01s17.com/blog/141-warfare https://www.wh01s17.com/blog/141-warfare Tue, 07 Oct 2025 00:00:00 GMT writeup 141 - Warfare — writeup, hacking, CTF, cybersecurity, Linux