THM CryptoCabana
root
11 August 2026
Cloud · Medium · 90 pts
Sleep easy, said the kiosk.
A walkthrough of CryptoCabana: an over-permissioned SAS token in plain client-side JS, a hidden storage container, a leaked service principal, and a Key Vault secret that "rotation" didn't actually kill.
- Read more about THM CryptoCabana
- Log in or register to post comments
THM Towel on a Sunbed
root
11 August 2026
TryHackMe · Room Writeup
🏖️ Towel on the Sunbed
Exploiting a TOCTOU race condition in a crypto "staking rewards" web app to bypass the 24-hour claim cooldown and reach Whale-tier status.
Overview
Ponzi Portfolio is a "wellness rewards" crypto das
- Read more about THM Towel on a Sunbed
- Log in or register to post comments
THM Guestbook
root
11 August 2026
CTF Writeup — Web / Prompt Injection
Byte Lotus — VERA Guestbook
Getting an LLM-backed "night reviewer" to leak a flag file through its own tool-calling layer.
- Read more about THM Guestbook
- Log in or register to post comments