6 Feb, 2023 Hack The Box: Response Machine Walkthrough – Insane Difficulty Insane Machine AES, API, base64, bulk_extractor, BurpSuite, Challenges, Cross Protocol Request Forgery, dig, dnsmasq, ftp, ftp smuggling, gobuster, HackTheBox, Incident Handling, javascript, json, LDAP, ldapadd, Linux, openssl, PCAP, Penetration Testing, PHP, pspy64, python3, RsaCtfTool, smtpd, ssh, SSH key, ssrf, Wireshark
29 Jan, 2023 Hack The Box: Ambassador Machine Walkthrough – Medium Difficulty Medium Machine arbitrary file read, Challenges, curl, directory traversal, git, grafana, HackTheBox, Linux, MySQL, mysql database, Penetration Testing, python3
22 Jan, 2023 Hack The Box: (UpDown) Upload Phar File for RCE Medium Machine Challenges, HackTheBox, Penetration Testing, Vulnerabilities
19 Jan, 2023 Hack The Box: Forgot Machine Walkthrough – Medium Difficulty Medium Machine BurpSuite, cache abuse, Challenges, command injection, Forgot Password Vulnerability, gobuster, HackTheBox, Linux, MySQL, mysql database, Penetration Testing, Python, source code review, ssh, varnish http cache
13 Dec, 2022 Hack The Box: (Outdated Machine) Using WSUS attack Medium Machine HackTheBox, Penetration Testing, SharpWSUS, Tools, Windows, WSUS
24 Oct, 2022 Hack The Box: (Unintended Way) To obtain a root shell using CVE-2022-2588 Vulnerability on Faculty HTB Medium Machine
17 Oct, 2022 Hack The Box: Perspective Machine Walkthrough – Insane Difficulty Insane Machine API, ASP net application, BurpSuite, command injection, cookie, Forgot Password Vulnerability, gobuster, HackTheBox, idor, JPEG File Extension, oracle padding attack, Penetration Testing, port forwarding, Security, shtml file, ssh, SSH key, ssrf, upload, Windows, ysoserial
17 Oct, 2022 Hack The Box: (Unintended) way to get Root Privileges Access using the latest version JuicyPotato Insane Machine Challenges, HackTheBox, Vulnerabilities, Windows
24 Sep, 2022 Hack The Box: Shoppy Machine Walkthrough – Easy Difficulty Easy Machine BurpSuite, bypass the nosql authentication, Challenges, crackstation, gobuster, HackTheBox, json, linpeas, Linux, mattermost, nosql injection, password-manager, Penetration Testing