ROAHACKS Logo
ROAHACKS
>CTF WALKTHROUGHS
Browse walkthroughsRead on Medium
3
writeups
3
platform
AD · Web
focus

Walkthroughs

3 published
FeaturedEasy LinuxPG Play

PG Play — Vegeta: 1

October 11, 2026 10 min read

A decoding-heavy Linux box: decode a Base64 QR code hidden in page source, follow a b374k shell hint, extract SSH credentials from Morse code in a WAV file, then escalate to root via a UID-0 backdoor left in /etc/passwd and bash history.

Enumeration Base64 QR Code Morse Decoding b374k /etc/passwd Privesc
Read full writeup
MediumLinux

TryHackMe — Mr Robot

A beginner-friendly Linux box: read robots.txt for the first key and a wordlist, enumerate and brute-force WordPress with Hydra, drop a theme-editor reverse shell, crack a user's MD5 hash, then abuse SUID nmap to escalate to root.

Read
EasyWindows

HTB — Fluffy

An easy Windows Active Directory box: capture NTLM hashes via CVE-2025-24071, run a shadow credentials attack with BloodHound path analysis, then abuse ADCS ESC16 to escalate to Domain Administrator.

Read
$ more writeups incoming

New HTB & CTF walkthroughs are added regularly. Follow along on Medium.