VulnHub Writeups

Author: Roman Mares
Company: Delta Force Security LLC — Phoenix, AZ
Education: AAS Cybersecurity + Linux Administration — Scottsdale Community College
GitHub: Romanm24 | LinkedIn: roman-mares-

---

Overview

Detailed penetration testing writeups for VulnHub virtual machines, documenting the complete attack chain from initial reconnaissance through privilege escalation to root flag capture. Each writeup follows an OSCP/PNPT-style methodology and includes remediation recommendations written from a SOC analyst perspective.

These writeups demonstrate hands-on skills in:

• Network and web application reconnaissance
• Service exploitation and web app attacks (SQLi, file upload bypass)
• Steganography and OSINT
• Linux privilege escalation (sudo abuse, SUID, cron, PATH hijacking)
• Defensive hardening recommendations per finding

---

Machines

Machine	Difficulty	Key Techniques	Root
Mercury	Easy	Web enum, Django SQLi, credential extraction, sudo vim	✅
Deathnote	Easy	WordPress enum, steganography, sudo nano escape	✅
PowerGrid	Intermediate	Multi-VM pivot, GPG decryption, cron job abuse	✅
The Grid	Intermediate	SQLi, hash cracking, file upload bypass, SUID python3	✅

---

Methodology

1. Reconnaissance   →  nmap, netdiscover, passive OSINT
2. Enumeration      →  gobuster, nikto, wpscan, enum4linux
3. Exploitation     →  manual + tool-assisted
4. Post-Exploit     →  linpeas, sudo -l, SUID/GUID, cron audit
5. PrivEsc          →  sudo misconfig, SUID abuse, cron, kernel
6. Hardening        →  CVE mapping, remediation per finding

---

Tools Referenced

nmap · gobuster · nikto · wpscan · hydra · linpeas · metasploit · burp suite · steghide · hashcat · john · python3 · netcat · proxychains

---

SOC Platform

These writeups support ongoing security research published at Delta Force SOC AI.

---

All machines are hosted on VulnHub or in isolated local lab environments. Content is strictly for educational and professional development purposes.