<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Nahamsec on Dendrite // Log</title><link>https://blog.hakvault.com/tags/nahamsec/</link><description>Recent content in Nahamsec on Dendrite // Log</description><generator>Hugo</generator><language>en-us</language><lastBuildDate>Sat, 01 Aug 2026 00:00:00 +0000</lastBuildDate><atom:link href="https://blog.hakvault.com/tags/nahamsec/index.xml" rel="self" type="application/rss+xml"/><item><title>Why My NahamSec HackingHub Reverse Shell Didn't Catch — and Why the Web Shell Was Enough</title><link>https://blog.hakvault.com/2026/08/why-my-nahamsec-hackinghub-reverse-shell-didnt-catch-and-why-the-web-shell-was-enough/</link><pubDate>Sat, 01 Aug 2026 00:00:00 +0000</pubDate><guid>https://blog.hakvault.com/2026/08/why-my-nahamsec-hackinghub-reverse-shell-didnt-catch-and-why-the-web-shell-was-enough/</guid><description>&lt;p>I ran into a classic CTF problem while working through a NahamSec HackingHub web lab: I had working command execution through a web shell, but my reverse shell refused to connect back to my machine.&lt;/p>
&lt;p>The funny part was I didn&amp;rsquo;t actually need the reverse shell at all.&lt;/p>
&lt;h2 id="the-setup">The setup&lt;/h2>
&lt;p>The target exposed a PHP endpoint that allowed me to execute commands through a &lt;code>cmd&lt;/code> parameter. Once I confirmed command execution worked, I tried to upgrade the web shell to a proper interactive Bash reverse shell.&lt;/p></description></item></channel></rss>