Stubborn Beats Brilliant

Aug 30, 2025 · 2 min · web , exploitation , juice-shop , methodology

There is a particular feeling the moment a chain lands: a couple of bugs stitched together on a box until a command you typed on your machine runs on the target, and a little $ blinks back from somewhere it absolutely should not be. It does not get old.

What does fade, about four seconds later, is the mythology. Not legal guilt (this is my own lab, nothing real was touched) but the “oh, it was that easy?” kind.

Because here is the thing about most footholds: they are not wizardry. Some genuinely are, and that work is hard and beautiful. But the ordinary shell is patience plus reading plus a developer who trusted input they should not have. The box does not fall because you are brilliant. It falls because the lock was already a little bit open and you were the one stubborn enough to keep jiggling the handle.

I will take that trade every day. Stubborn beats brilliant most days, and stubborn is trainable in a way that brilliant is not.

The honest part, because honesty is the whole point of writing this down: a clean foothold is methodology, not luck. The first pass is usually flailing. The second pass (proper enumeration, a real methodology, the technique done the way it should be done) is the one worth keeping. So I run it again, cleanly, and write that version up. The flailing was for me. The clean run is the deliverable.

That little blinking $ from a place it did not belong is very hard to stop chasing. I have stopped trying to stop. Responsibly, in the lab, where the only thing I am allowed to own is something built to be owned.

Edit this page on GitHub Last updated: 5/29/2026, 3:36:43 PM