Chasing the OPNsense RCE: The Story Behind My First CVEs (CVE-2026-57155)
How I found 5 vulnerabilities and achieved Remote Code Execution in OPNsense after a week of security research (including CVE-2026-57155).
HackerAsk
My personal blog about cyber security, writeups, researches and more
Latest posts
My OSCP Pentesting Cheatsheet
I had my OSCP exam on 14.03.2025 and on 17 March, three days later, I already received the confirmation, that I had passed the OSCP exam! This is my compiled and comprehensive list of useful commands that I have documented in my personal knowledge base. In this blog post, I can find useful tips and commands about network and service enumeration, password guessing, reverse shells, Active Dire...
PermX - HackTheBox Machine WriteUp
This is my WriteUp for the medium difficulty Linux machine Blurry on HackTheBox Labs. Recon My first step was to scan with nmap the machine for open ports: $ nmap -Pn -sV $LAB_IP PORT STATE SERVICE VERSION 22/tcp open ssh OpenSSH 8.9p1 Ubuntu 3ubuntu0.10 (Ubuntu Linux; protocol 2.0) 80/tcp open http Apache httpd 2.4.52 There were only two open ports available: Port 22 - ssh ...
Blurry - HackTheBox Machine WriteUp
This is my WriteUp for the medium difficulty Linux machine Blurry on HackTheBox Labs. Recon My first step was to scan with nmap the machine for open ports: $ nmap -p- -vvv $LAB_IP -Pn Copy the scan result in a file(e.g. nmap/ports) and use the following command to get all ports comma separated as output: $ cat nmap/ports | cut -f1 -d '/' | tr '\n' ',' Then I performed a more detailed versi...
BoardLight - HackTheBox Machine WriteUp
This is my WriteUp for the easy Linux Machine BoardLight on HackTheBox Labs. After starting the machine and my penetration testing environment, I connected to the HackTheBox VPN and was ready to start pwning the box. Recon The first step I always do on HackTheBox machines, is executing whatweb, to get the hostname of the machine from the IP address: $ whatweb 10.10.11.11 I got the domain name...