https://blog-ga2.pages.dev/tags/gtfobins/ Recent content in GTFOBins on burkocyigit Hugo en No rights reserved. Wed, 12 Aug 2026 20:00:00 +0300 https://blog-ga2.pages.dev/posts/knife/ Wed, 12 Aug 2026 20:00:00 +0300 https://blog-ga2.pages.dev/posts/knife/ Walkthrough of HackTheBox Knife — exploiting PHP 8.1.0-dev backdoor for instant RCE and privilege escalation via sudo knife (Chef) GTFOBins escape. https://blog-ga2.pages.dev/posts/cozyhosting/ Tue, 11 Aug 2026 20:00:00 +0300 https://blog-ga2.pages.dev/posts/cozyhosting/ Walkthrough of HackTheBox CozyHosting — exploiting Spring Boot Actuator session leakage, OS command injection with whitespace bypass, PostgreSQL credential extraction, and sudo ssh GTFOBins escape.