https://anirudh958.github.io/Anirudh958Security posts and write ups. 2026-08-23T23:17:07+05:30 Anirudh_Gupta https://anirudh958.github.io/ Jekyll © 2026 Anirudh_Gupta /assets/img/favicons/favicon.ico /assets/img/favicons/favicon-96x96.png Linux Privilege Escalation: From Dirty COW to RefluXFS — How Low-Privilege Shells Become Root2026-08-23T10:00:00+05:30 2026-08-23T23:16:48+05:30 https://anirudh958.github.io/posts/linux-privilege-escalation-deep-dive/ Anirudh_Gupta A hands-on tour of Linux privilege escalation — SUID, capabilities, race conditions, and kernel memory bugs explained through 16 famous LPE CVEs, from Dirty COW and Dirty Pipe to PwnKit, Januscape, and RefluXFS. XSS2Shell: How a WordPress Login Page XSS Chains Its Way to Remote Code Execution (CVE-2026-64638)2026-08-12T10:00:00+05:30 2026-08-12T10:00:00+05:30 https://anirudh958.github.io/posts/Xss2Shell/ Anirudh_Gupta XSS2Shell (CVE-2026-64638) explained: how a parser-disagreement XSS on the WordPress login page chains through the REST API and a fake plugin to achieve full Remote Code Execution. TryHackMe Beach Bar Walkthrough: Boot2Root via YAML Deserialization2026-08-01T10:00:00+05:30 2026-08-02T00:33:09+05:30 https://anirudh958.github.io/posts/beach-bar-tryhackme-walkthrough/ Anirudh_Gupta TryHackMe Beach Bar walkthrough: DJ credentials in page source, YAML deserialization RCE for the user flag, and the root flag leaked in a process command line. JWT Security Deep Dive: How JSON Web Tokens Work, Why They Break, and How Attackers Exploit Them2026-07-21T10:00:00+05:30 2026-08-23T22:26:47+05:30 https://anirudh958.github.io/posts/jwt-security-deep-dive/ Anirudh_Gupta A comprehensive guide to JSON Web Tokens, covering how they work, common vulnerabilities, and how attackers exploit weak implementations. The Current State of Agentic Pentesting2026-05-15T10:00:00+05:30 2026-08-23T22:26:47+05:30 https://anirudh958.github.io/posts/the-current-state-of-agentic-pentesting/ Anirudh_Gupta A practical analysis of agentic pentesting capabilities, current tools, operational risks, guardrails, and the continuing need for human oversight.