HTB linux easy ~1 min
HTB: Keeper
Request Tracker default creds lead to a KeePass dump; recovering the master password from process memory (CVE-2023-32784) yields root's PuTTY key.
senior ios dev · offensive security practitioner · self-taught
Break boxes.
Write down exactly how.
r00t@0xkaan.dev:~$ cat whoami.txt
I'm Kaan, a senior iOS developer by trade and an offensive security practitioner by obsession.
This is my open notebook: every box I break, every dead end, and the tooling I build along the way. If it's here, I actually did it. Nothing on this site is theory I haven't touched.
I read systems the way I read code: assume nothing, trust no input, and keep going until it does something it wasn't supposed to.
“Root access is temporary. The writeup is forever.” // pinned above the desk since day one
r00t@0xkaan.dev:~$ uptime && ls writeups/ | wc -l
// counters
12 writeups
34 rooms / boxes
3 certs in progress
120+ lab hours
// counted by hand, updated when I remember
r00t@0xkaan.dev:~$ ls -t writeups notes | head -3
// latest_writeups
all writeups → THM linux medium ~1 min
THM: Mr Robot CTF
Three keys across a Mr Robot-themed box: robots.txt wordlist, a brute-forced WordPress login to a reverse shell, then an SUID nmap interactive shell to root.
note ~1 min
Building my OSINT workflow
How I structure a passive-recon pass before ever touching a target: seeds, pivots, and the folder layout that keeps findings from turning into chaos.