$#av-evasion

TryHackMe: Wreath

A three-host network pivot: a Webmin RCE foothold, chisel/socat relays into an isolated GitStack server and a personal PC, a leaked git repo revealing a file-upload webshell, PHP payload obfuscation for AV evasion, and an unquoted-service-path privesc to SYSTEM.

• #pivoting
• #av-evasion
• #privesc
• #rce