13 Dec, 2022 Hack The Box: (Outdated Machine) Using WSUS attack Medium Machine HackTheBox, Penetration Testing, SharpWSUS, Tools, Windows, WSUS
24 Oct, 2022 Hack The Box: (Unintended Way) To obtain a root shell using CVE-2022-2588 Vulnerability on Faculty HTB Medium Machine
17 Oct, 2022 Hack The Box: Perspective Machine Walkthrough – Insane Difficulty Insane Machine API, ASP net application, BurpSuite, command injection, cookie, Forgot Password Vulnerability, gobuster, HackTheBox, idor, JPEG File Extension, oracle padding attack, Penetration Testing, port forwarding, Security, shtml file, ssh, SSH key, ssrf, upload, Windows, ysoserial
17 Oct, 2022 Hack The Box: (Unintended) way to get Root Privileges Access using the latest version JuicyPotato Insane Machine Challenges, HackTheBox, Vulnerabilities, Windows
24 Sep, 2022 Hack The Box: Shoppy Machine Walkthrough – Easy Difficulty Easy Machine BurpSuite, bypass the nosql authentication, Challenges, crackstation, gobuster, HackTheBox, json, linpeas, Linux, mattermost, nosql injection, password-manager, Penetration Testing
12 Sep, 2022 Hack The Box: UpDown Machine Walkthrough – Medium Difficulty Medium Machine BurpSuite, Challenges, curl, easy_install, git, git-dumper, gobuster, gtfobins, HackTheBox, htaccess, Linux, Penetration Testing, phar file, php functions, pwncat-cs, source code review, ssh, SSH key
10 Sep, 2022 Hack the box: Vessel Machine Walkthrough – Hard Difficulty Hard Machine BurpSuite, Challenges, curl, feroxbuster, git, git-dumper, HackTheBox, linpeas, Linux, Node.js, OpenWeb Analytics, Penetration Testing, pwncat-cs, SQL Injection, Vulnerabilities
5 Sep, 2022 Hack The Box: Health Machine Walkthrough – Medium Difficulty Medium Machine base64, Challenges, gogs, HackTheBox, Linux, MySQL, mysql database, nc listener, Penetration Testing, python3, ssh, union sqli, Vulnerabilities, webhook
3 Sep, 2022 Hack The Box: Outdated Machine Walkthrough – Medium Difficulty Medium Machine Challenges, follina, HackTheBox, nc64.exe, net user, ntlm, Penetration Testing, python3, rubeus.exe, sharphound, SharpWSUS, smbclient, swaks, Vulnerabilities, Windows
27 Aug, 2022 Hack The Box: Extension Machine Walkthrough – Hard Difficulty Hard Machine API, BurpSuite, Challenges, crackstation, curl, Gitea, gobuster, HackTheBox, json, Linux, MySQL, nginx, Penetration Testing, port forwarding, python3, ssh, SSH key, wfuzz