░█▀▀░█░█░█▀▄░█▀▀░█▀▀░█░█
░▀▀█░█▀█░█▀▄░█▀▀░█▀▀░█▀▄
░▀▀▀░▀░▀░▀░▀░▀▀▀░▀▀▀░▀░▀
shreekara@sneaky69:~$
$
shreekara
// AppSec / WAPT · HTB & TryHackMe
// AppSec / WAPT · HTB & TryHackMe
$cat~/about.txt
ISE grad (2026) · focused on web app pentesting and offensive security.
Top 3% on TryHackMe, actively working through HackTheBox.
Currently preparing for HTB CWES (Certified Web Exploitation Specialist).
Every box gets a writeup — most take more than a day to crack.
Top 3% on TryHackMe, actively working through HackTheBox.
Currently preparing for HTB CWES (Certified Web Exploitation Specialist).
Every box gets a writeup — most take more than a day to crack.
Recent Writeups
Reactor
Next.js React2Shell RCE → SQLite creds → Node debug port to root · 2026-05-24
HTBEasy
Kobold
MCP tool RCE (CVE-2026-23520) → Docker socket abuse → chroot escape · 2026-06-11
HTBEasy
CCTV
ZoneMinder SQLi (CVE-2024-51482) → hash crack → motionEye RCE to root · 2026-06-02
HTBEasy
Silentium
Flowise RCE chain → env creds → Gogs CVE to root · 2026-05-30
HTBMedium
Nexus
Gitea commit-history leak → Krayin CRM RCE (CVE-2026-38526) → template-sync privesc to root · 2026-07-15
HTBMedium
Orion
Craft CMS pre-auth RCE (CVE-2025-32432) → hash crack → telnetd auth bypass to root · 2026-07-16
HTBEasy
Quick Links
.
├── writeups/
├──├── reactor.md
├──├── silentium.md
├──├── Kobold.md
├──├── cctv.md
├──├── Nexus.md
├──├── Orion.md
└── about.md
├── writeups/
├──├── reactor.md
├──├── silentium.md
├──├── Kobold.md
├──├── cctv.md
├──├── Nexus.md
├──├── Orion.md
└── about.md
System Status
Online | HTB: Active | THM: Top 3% | Writeups: 6
shreekara@sneaky69:~$