• Search for:

    Category Archives: Hard Machine

    1. Home  - Challenges HackTheBox
    2. Archive by category "Hard Machine"
      3. ( Page2 )
    26 Apr, 2025
    Hack The Box: Vintage Machine Walkthrough – Hard Difficulty
    Hard Machine , , , , , , , , , , , ,

    Recently completed an Active Directory penetration test where I obtained both the user and root flags through a series of Kerberos and privilege escalation attacks. I first exploited a weak password on a legacy computer account (fs01$) to retrieve a Kerberos TGT and extract the gMSA password. After reactivating a disabled service account (svc_sql), making it ASREPRoastable, and cracking its hash, I gained credentials for another domain user and authenticated via Evil-WinRM to capture the user flag. For the root flag, I decrypted DPAPI-protected secrets to access a higher-privileged account (c.neri_adm), added a compromised service account to a privileged group, assigned an SPN, and performed a Kerberos delegation attack to impersonate a domain admin, ultimately achieving SYSTEM-level access and capturing the root flag. Great experience applying Kerberos exploitation techniques and privilege escalation strategies in a real-world scenario!

    hashtag#ActiveDirectory hashtag#PenetrationTesting hashtag#Kerberos hashtag#OffensiveSecurity hashtag#RedTeam hashtag#CyberSecurity hashtag#ASREPRoasting hashtag#DPAPI hashtag#PrivilegeEscalation hashtag#HackTheBox hashtag#Infosec hashtag#HacktheBox …

    Learn MoreHack The Box: Vintage Machine Walkthrough – Hard Difficulty

    29 Mar, 2025
    Hack The Box: BlockBlock Machine Walkthrough – Hard Difficulty
    Hard Machine , , , , , , , , , , , ,

    This walkthrough examines the BlockBlock machine from Hack The Box, classified as a medium-difficulty challenge. The assessment began with the exploitation of an XSS vulnerability, which facilitated credential theft through the Ethereum JSON-RPC API, granting SSH access. Privilege escalation was achieved by leveraging the forge binary to obtain higher privileges, followed by exploiting a misconfigured pacman package manager to gain root access. This engagement underscores the critical importance of securing APIs, implementing robust input validation, and enforcing strict privilege escalation controls to mitigate security risks.

    #HackTheBox #CyberSecurity #PenetrationTesting #CTF #EthicalHacking #XSS #PrivilegeEscalation #BlockchainSecurity …

    Learn MoreHack The Box: BlockBlock Machine Walkthrough – Hard Difficulty

    22 Feb, 2025
    Hack The Box: Yummy Machine Walkthrough – Hard Difficulty
    Hard Machine , , , , , , , , , , , ,

    Introduction to Yummy: This write-up will explore the “Yummy” machine from Hack The Box, categorized as a Hard difficulty challenge. This walkthrough will cover the reconnaissance, exploitation, and privilege escalation steps required to capture the flag. Objective: The goal of

    Continue ReadingHack The Box: Yummy Machine Walkthrough – Hard Difficulty

    25 Jan, 2025
    Hack The Box: Caption Machine Walkthrough – Hard Difficulty
    Hard Machine , , , , , , , , , , , ,

    Introduction to Caption: This write-up will explore the “Caption” machine from Hack The Box, which is categorized as a Hard difficulty challenge. This walkthrough will cover the reconnaissance, exploitation, and privilege escalation steps required to capture the flag. Objective: The

    Continue ReadingHack The Box: Caption Machine Walkthrough – Hard Difficulty

    30 Nov, 2024
    Hack The Box: Lantern Machine Walkthrough – Hard Difficulty
    Hard Machine , , , , , , , , , , , ,

    Introduction to Lantern: This write-up will explore the “Lantern” machine from Hack The Box, categorized as a Hard difficulty challenge. This walkthrough will cover the reconnaissance, exploitation, and privilege escalation steps required to capture the flag. Objective: The goal of

    Continue ReadingHack The Box: Lantern Machine Walkthrough – Hard Difficulty

    23 Nov, 2024
    Hack The Box: Resource Machine Walkthrough – Hard Difficulty
    Hard Machine , , , , , , , , ,

    Introduction to Resource: In this write-up, we will explore the “Resource” machine from Hack The Box, which is categorized as a Hard difficulty challenge. This walkthrough will cover the reconnaissance, exploitation, and privilege escalation steps required to capture the flag.

    Continue ReadingHack The Box: Resource Machine Walkthrough – Hard Difficulty

    16 Nov, 2024
    Hack The Box: Axlle Machine Walkthrough – Hard Difficulty
    Hard Machine , , , , , , , ,

    Introduction to Axlle: In this write-up, we will explore the “Axlle” machine from Hack The Box, categorized as a Hard difficulty challenge. This walkthrough will cover the reconnaissance, exploitation, and privilege escalation steps required to capture the flag. Objective: The

    Continue ReadingHack The Box: Axlle Machine Walkthrough – Hard Difficulty

    9 Nov, 2024
    Hack The Box: Blazorized Machine Walkthrough – Hard Difficulty
    Hard Machine , , , , , , , , , ,

    Introduction to Blazorized: This write-up will explore the “Blazorized” machine from Hack The Box, categorized as a Hard difficulty challenge. This walkthrough will cover the reconnaissance, exploitation, and privilege escalation steps required to capture the flag. Objective on Blazorized machine:

    Continue ReadingHack The Box: Blazorized Machine Walkthrough – Hard Difficulty

    14 Sep, 2024
    Hack the Box: Intuition Machine Walkthrough – Hard Diffucility
    Hard Machine , , , , , , , , , , , ,

    Introduction to Intuition: In this write-up, we will explore the “Intuition” machine from Hack The Box, categorized as a Hard difficulty challenge. This walkthrough will cover the reconnaissance, exploitation, and privilege escalation steps required to capture the flag. Objective: The

    Continue ReadingHack the Box: Intuition Machine Walkthrough – Hard Diffucility