What are AMSI and AppLocker bypasses? This is a Windows Machine that might have some security features that might be preventing the reverse shell from running on the machine itself. We can assume that AppLocker is in use inside the

Continue ReadingHack The Box: (Sekhmet) AMSI and AppLocker Bypass

In this post, I would like to share a weakness of ModSecurity that has been used within the Sekhmet Machine. The full writeup on the Sekhmet machine can be found here What is ModSecurity? For those who are not familiar

Continue ReadingHack The Box: (Sekhmet) ModSecurity Demonstration

In this post, I would like to share how to escape the docker environment to obtain Root Privileges Access on the machine itself. However, I did manage to get Root Privileges Access by taking a different route which you can

Continue ReadingHack The Box: (Extension) Docker escape on root privileges

What is Varnish’s HTTP cache? To be honest, it’s my debut of hearing about the Varnish HTTP cache and my first time exploiting it. As a result, let’s try to learn it together where my thought might be different from

Continue ReadingHack The Box: (Forgot) – Varnish HTTP cache to retrieve any cache