TryHackMe

Going down the SSRF rabbit hole with a Gopher and a Claude. ...

Stealing HttpOnly protected cookies with Blind XSS, escalating a RFI to RCE, pivoting in a docker network with Ligolo-ng, cracking some hashes and taking advantage of miss-configured permissions. ...