Exploit for eCPPT-Penetration-Testing-Reports CVE-2024-8517

## https://sploitus.com/exploit?id=65E0C16C-7DAE-5E13-820B-B2415659245F
# eCPPT Penetration Testing Reports

Penetration testing lab reports and CTF writeups documenting offensive security techniques, vulnerability exploitation, and post-exploitation — INE eCPPT (Certified Professional Penetration Tester) v3 certification preparation.

## Contents

| File | Description |
|------|-------------|
| 24_CTF_Network Penetration Testing.md | Full walkthrough of eCPPT v3 Network Penetration Testing Skill Check CTF — 5/5 flags captured |

## Skills Demonstrated

- Network enumeration (SNMP, SMB, MSSQL)
- Credential brute-forcing and service exploitation
- Pivoting through compromised hosts via Metasploit autoroute and SOCKS proxy
- Web application exploitation (CVE-2024-8517 — SPIP BigUp unauthenticated RCE)
- Manual exploit reconstruction from Ruby source to Python
- Linux privilege escalation via sudo pip (GTFOBins)
- Finger protocol enumeration

## Certification Path

eJPT ✅ → eCPPT (in progress) → OSCP

## Author

Lubo Ivan | [github.com/Lubiq](https://github.com/Lubiq) | Vancouver, BC
EOF