↓ Skip to main content
Liam Smydo
Liam Smydo

Liam Smydo

Cybersecurity Enthusiast

Hi, I’m Liam. This site contains my various cybersecurity projects, CTF write-ups, and labs, including detailed technical write-ups and different resources I find useful. Below, you’ll find some of my recent projects and CTF write-ups.

Recent

TryHackMe: Internal

·1560 words·8 mins
A hard TryHackMe box that chains WordPress brute-forcing, PHP webshell injection, credential harvesting from a plaintext file, and a Ligolo-ng pivot to an internal Jenkins instance — ultimately escalating to root via a plaintext password left in a Docker container.

TryHackMe: Enterprise

·1821 words·9 mins
A hard TryHackMe Active Directory box that chains anonymous SMB/LDAP enumeration, OSINT credential recovery from a public Git repository, Kerberoasting, and PrintNightmare (CVE-2021-1675) local privilege escalation to fully compromise the domain.

TryHackMe: Daily Bugle

·1633 words·8 mins
A hard TryHackMe box exploiting a known Joomla 3.7 SQL injection vulnerability to extract and crack admin credentials, followed by a PHP webshell for initial access and a yum sudo misconfiguration for privilege escalation to root.

HackSmarter Web App Pentesting Capstone

·6504 words·31 mins
Comprehensive web application penetration test of the Hack Smarter e-commerce platform. 30 vulnerabilities identified — SQL injection, RCE, XSS, SSRF, CSRF, IDOR, and session management weaknesses — with a full attack chain from unauthenticated visitor to remote code execution.