03 / Research notebook
Questions worth testing carefully.
Experiments, limitations, and sourced lab write-ups. Articles are in Vietnamese with English abstracts.
3 articles
WRITEUP · Reference walkthrough
Fawn: testing anonymous FTP access
Fawn introduces a common file-service exposure: anonymous FTP access to a file that should not be publicly readable. This reference walkthrough separates service discovery, authentication, directory listing, and file retrieval so that each observation supports a specific conclusion. It also distinguishes access control from transport encryption and proposes a focused retest. Commands describe an authorized lab workflow; they are not a transcript of a live HTB session or evidence of the portfolio owner's completion.
15 Sep 2026 · 4 min read →WRITEUP · Reference walkthrough
Appointment: understanding SQL injection authentication bypass
This reference walkthrough examines authentication bypass in Hack The Box's Appointment machine. It connects a small, controlled login test to the underlying SQL parsing error, then proposes evidence collection and regression checks. The emphasis is on explaining why an input changes query logic and what would establish a successful fix. The SQL statement is a teaching model, not recovered application source. No live HTB session was executed for this article, and no personal completion or flag is claimed.
15 Sep 2026 · 4 min read →WRITEUP · Reference walkthrough
Redeemer: unauthenticated Redis data access
Redeemer provides a starting point for reasoning about exposed Redis services. This reference walkthrough uses service identification, a minimal connectivity check, incremental key discovery, and type-aware retrieval to evaluate unauthenticated data access. It separates network reachability from authorization and explains why successful reads do not imply operating-system compromise. The workflow is based on HTB's machine synopsis and Redis documentation. No live HTB execution, retrieved flag, or personal machine completion is asserted.
15 Sep 2026 · 4 min read →Personal lab evidence has a local run or log. Reference walkthroughs are sourced learning notes and do not claim machine completion.