03 / Research notebook
Questions worth testing carefully.
Experiments, limitations, and sourced lab write-ups. Articles are in Vietnamese with English abstracts.
2 articles
WRITEUP · Reference walkthrough
Fawn: testing anonymous FTP access
Fawn introduces a common file-service exposure: anonymous FTP access to a file that should not be publicly readable. This reference walkthrough separates service discovery, authentication, directory listing, and file retrieval so that each observation supports a specific conclusion. It also distinguishes access control from transport encryption and proposes a focused retest. Commands describe an authorized lab workflow; they are not a transcript of a live HTB session or evidence of the portfolio owner's completion.
15 Sep 2026 · 4 min read →WRITEUP · Reference walkthrough
Redeemer: unauthenticated Redis data access
Redeemer provides a starting point for reasoning about exposed Redis services. This reference walkthrough uses service identification, a minimal connectivity check, incremental key discovery, and type-aware retrieval to evaluate unauthenticated data access. It separates network reachability from authorization and explains why successful reads do not imply operating-system compromise. The workflow is based on HTB's machine synopsis and Redis documentation. No live HTB execution, retrieved flag, or personal machine completion is asserted.
15 Sep 2026 · 4 min read →Personal lab evidence has a local run or log. Reference walkthroughs are sourced learning notes and do not claim machine completion.