TryHackMe: PlottedTMS Writeup

TryHackMe features two Linux CTF boxes, Plotted and Gallery. Plotted hosts a PHP Traffic Offense Management System where SQL injection and arbitrary file uploads enable remote code execution. Privilege escalation occurs via cron jobs and doas rules for openssl. Gallery runs a Simple Image Gallery System on port 8080, utilizing SQL injection and avatar uploads for access. After recovering credentials from .bash_history, a misconfigured sudo rule for /opt/rootkit.sh allows full root access via nano.