strikoder

German grind, new job, and teaching pentesting to uni students across Syria. No time to post. barely time to sleep. but I'm back. GYM, YT, time management, HTB machines & challenges :B 2 weeks ago I participated in HTB CTF & yesterday I dropped a video youtu.be/y_4i0MykzjQ

After a month break, I'm back! New HackTheBox walkthrough: Kobold MCPJam CVE-2026-23744 RCE (no auth, direct spawn) → PrivateBin template cookie traversal → Docker privileged container escape. youtu.be/tLMPtvQzXC8 #HackTheBox #Docker #ContainerEscape #MCPJam #CVE

A few weeks ago, I noticed the Syrian flag in the @hackthebox_eu country rankings was still the one tied to the former (Assad) government. I reached out to the HTB team and asked if it could be updated to the current Syrian flag. Today, I saw the change went live :D #HackTheBox

Exactly one year ago, I left my job and started my cybersecurity journey. One year later: OSCP PNPT PT1 eJPT Now working as a Penetration Tester. A huge thank you to everyone and the platforms that played a role in the journey: @TCMSecurity @offsectraining @tryhackme @ine <3

Quick update regarding the fake CredSpray repository: GitHub has now removed both the malicious repo and the associated account :P after multiple reports from the community. Thanks everyone who helped report it. Official repository: github.com/strikoder/CredSpr…

I may not have the best rank nor the best tier, but at least I'm trying my best. @hackthebox_eu #HTBXP

Excited to share that I’ve passed the OSCP+ (Offensive Security Certified Professional Plus) exam by @offsectraining !!! I wrote and published a review video, make sure to check them! Medium: medium.com/@strikoder/striko… YT: youtube.com/watch?v=9HFKfGs6… #offsec #oscp #pentesting #cyber

New OSCP Resource Alert!!! Just dropped the complete OSCP report guide using SysReptor. If you're planning to take OSCP or already scheduled your exam, watch this before you submit anything (espeically the watermark tip). youtu.be/dT7XgN8uuSU #OSCP #Report #sysreptor

Sorry everyone, I'm late (again) as I was taking the OSCP ! New HackTheBox walkthrough: Snapped Nginx UI CVE-2026-27944 backup extraction → bcrypt cracking → dual privesc paths (snap CVE-2026-3888 + kernel copy-fail CVE-2026-31431). Enjoy the video! youtu.be/TBGtrUOu4e4

Back from vacation mode! Publishing HTB UpDown: only 5K solves despite being on every OSCP list. People skip it because "it's just PHP wrappers." Bad move. PHP filter chains, phar inclusion, and disabled_functions bypasses are critical for OSCP. youtu.be/aWq1d5ewfPg #OSCP

New HackTheBox walkthrough: Expressway UDP enumeration → IPsec IKE aggressive mode → PSK cracking → CVE-2025-32463 sudo privilege escalation. VPN pentesting meets modern privesc. youtu.be/RsoQJJvo8Is #HackTheBox #VPN #IPsec

New video - HTB Sherlock: Meerkat investigated a BonitaSoft exploit that led to SSH backdoors and data exfil. good practice if you're studying incident response or prepping for OSCP youtu.be/1Qq32NW9l-s used wireshark, jq, and some other tools. scripts are up on github

After a long break, I'm officially back. New HackTheBox walkthrough: Next.js CVE-2025 LFI and Terraform privilege escalation from enumeration to root. youtu.be/DTeTx3HInyM More content coming soon. Thanks for sticking around. #HackTheBox #OSCP #Cybersecurity

New HTB video up - Editor machine Chained CVE-2024-24893 for the foothold and CVE-2024-32019 to get root. youtu.be/0MxcgOs62YY commands: github.com/strikoder/CTFS/bl… #HackTheBox #OSCP #pentesting #editor

New HackTheBox video!!! Roundcube RCE (CVE-2025-49113) to foothold, then exploiting Below monitoring tool (CVE-2025-27591) symlink vulnerability for root. Watch on YT: youtu.be/Y2O0tlVgjo0 #HackTheBox #OSCP #CVE202549113 #CVE202527591 #Pentesting #Linux

New video: NetExec (nxc) - AD enumeration, hash dumping, and module demo (SMB/LDAP/WinRM/NTDS). Full walkthrough and timestamps here: youtu.be/JeZNcZhpTWI?si=lwgB… #Pentesting #CyberSecurity #netexec #crackmapexec #pentestingtools

New episode for pentesters: a practical deep dive into Mimikatz, ticket/hash concepts, LSASS targets, and more Watch: youtu.be/XPxqZFaC0xE #Pentest #RedTeam #infosec #mimikatz #lsass #hashdump #credentialsdump

Hello guys! So in my prep for OSCP I noticed many machines have dozens of SUID and SGID binaries that may be exploitable or limited. Especially during the exam you might miss something under pressure. GitHub Link: github.com/strikoder/gtfobin… #GTFOBins #SUID #GUID #gtfobinSUID

New video out: Authenticated SMB & LDAP enumeration in AD using custom OSCP-style scripts. Tools: rpcclient, netexec, ldapsearch Covers: Post-compromise recon, extracting users/groups/shares Watch here: youtu.be/kfxQRgKBfCI?si=rCiW… #OSCP #ActiveDirectory #RedTeam #Pentest

Happy to drop my favorite video so far. In this one, I cover full Active Directory enumeration using BloodHound and its three main ingestors: - SharpHound - bloodhound-python - RustHound Link: youtu.be/en_v4wM6Dm4?si=0a8Y… #BloodHound #ActiveDirectory #OSCP #PT1 #PNPT #CyberSecurity