https://basil9099.github.io/tags/eaphammer/Recent content in Eaphammer on Angus Dawson — Homelab & CTFshttps://basil9099.github.io/images/og-default.pnghttps://basil9099.github.io/images/og-default.pngHugo -- 0.165.0en-usFri, 09 Oct 2026 00:00:00 +0000https://basil9099.github.io/ctf/airtouch-htb/Fri, 09 Oct 2026 00:00:00 +0000https://basil9099.github.io/ctf/airtouch-htb/A Linux box where the attack surface is the air between three VLANs. A password leaked over SNMP opens a consultant laptop stocked with Wi-Fi radios, and the route to root runs through the networks it can hear: crack the tablets’ WPA2-PSK, decrypt the capture to hijack a cookie-trusting router panel, pivot through a .phtml upload, then clone the corporate WPA2-Enterprise AP with its own stolen certificate to crack an EAP identity and reach root.