Posts tagged "hackthebox"
Obscurity Writeup (HackTheBox)
🗓️ Published:
Uses directory enumeration, format string vulnerability, simple cryptography and a type of race condition exploit.
🗓️ Published:
Modify an RCE exploit POC and abuse a service to get a privileged shell.
🗓️ Published:
Anonymous FTP access, directory traversal vulnerability to read remote files followed by a privilege escalation via locally accessible API.
🗓️ Published:
AS-REP roasting, using WinRM to run Bloodhound, then utilizing DCSync rights to retrieve an NTLM hash and run PSExec.
OpenAdmin Writeup (HackTheBox)
🗓️ Published:
Uses RCE exploitation, password reuse, SSH port forwarding, passphrase bruteforcing and a cute privilege escalation method.
🗓️ Published:
Starts off with some SQL injection, upgrading a shell to an interactive TTY and a little bit of reverse engineering.
🗓️ Published:
Reverse some binaries to decrypt some hashes. Also, never assume what you do and don't have access to.
🗓️ Published:
Lots of enumeration, an information disclosure vulnerability, and a privilege escalation using Python.
🗓️ Published:
LDAP enumeration, a little bit of "bruteforcing", some file system enumeration, and execution of a well documented privilege escalation technique related to DNS.
Monteverde Writeup (HackTheBox)
🗓️ Published:
Lazy administrators, classic enumeration, SQL recon, and learning cool stuff about Azure Active Directory.
🗓️ Published:
HTTP request smuggling and AWS. Learned so much from this box.