LD_PRELOAD on HEKK https://hekk.one/tags/ld_preload/ Recent content in LD_PRELOAD on HEKK Hugo -- gohugo.io en info@hekk.one info@hekk.one © 2026 Sun, 30 Aug 2026 00:00:00 +0000 OFFSEC - Proving Grounds - CARRYOVER https://hekk.one/writeups/offsec/pg_practice/carryover/ Sun, 30 Aug 2026 00:00:00 +0000 info@hekk.one https://hekk.one/writeups/offsec/pg_practice/carryover/ Carvilla on port 80 is vulnerable to SQL injection, providing initial access via SQLmap. An exposed LD_PRELOAD variable enables a custom shared object to be executed with sudo, escalating privileges to root. OFFSEC - Proving Grounds - PATHWAY https://hekk.one/writeups/offsec/pg_practice/pathway/ Fri, 28 Aug 2026 00:00:00 +0000 info@hekk.one https://hekk.one/writeups/offsec/pg_practice/pathway/ Port 4566 exposes credentials, enabling SSH access. Sudo permits passwordless <code>/usr/bin/ping</code>, and the set LD_PRELOAD variable can be abused to compile a C payload and escalate privileges to root.