tun0: 10.10.14.7sess: 0x7f3auptime: 133d online
bash — tameen@kali:~

tameen@kali:~$▊

Tameen Kassem
View Writeups →Resume

↓ scroll

25+
Writeups
100+
Machines Compromised
HTB · THM
Platforms

// latest

Recent Writeups

view all →
HackTheBoxHard

HackTheBox — NanoCorp

Abusing a careers-portal zip upload to leak and crack web_svc's NTLMv2 hash via CVE-2025-24071 / CVE-2025-24054, walking a BloodHound ACL chain to monitoring_svc, then hijacking a vulnerable Checkmk agent's MSI self-repair (CVE-2024-0670) through RunasCs to execute code as SYSTEM.

#active-directory#cve-2025-24054#responder#ntlmv2
2026-01-08read →
HackTheBoxMedium

HackTheBox — Outbound

Chaining an authenticated RoundCube RCE exploit, MySQL session token harvesting with DES3 decryption, and a CVE-2025-27591 symlink attack via a world-writable log directory to reach root.

#roundcube#rce#metasploit#mysql
2025-07-12read →
HackTheBoxEasy

HackTheBox — Bashed

Exploiting a web-accessible phpbash shell for initial access, then escalating via sudo to scriptmanager and abusing a cron-run Python script to land root.

#Linux#Web#PHP#Cron
2025-04-10read →

// get in touch

Let's connect

Open to collaboration, discussion, job opportunities, bug bounty tips, and security research opportunities.

tameenyt@gmail.com