In this post, I would like to share a walkthrough of the Encoding Machine from Hack the Box This room will be considered a medium machine on Hack the Box What will you gain from the Encoding machine? For the user

Continue ReadingHack The Box: Encoding Machine – Medium Difficulty

In this post, I would like to share a walkthrough of the Broscience Machine from Hack the Box This room will be considered an Insane machine on Hack the Box What will you gain from the Broscience machine? For the user

Continue ReadingHack The Box: Broscience Machine Walkthrough-Medium Difficulty

What are AMSI and AppLocker bypasses? This is a Windows Machine that might have some security features that might be preventing the reverse shell from running on the machine itself. We can assume that AppLocker is in use inside the

Continue ReadingHack The Box: (Sekhmet) AMSI and AppLocker Bypass

In this post, I would like to share a weakness of ModSecurity that has been used within the Sekhmet Machine. The full writeup on the Sekhmet machine can be found here What is ModSecurity? For those who are not familiar

Continue ReadingHack The Box: (Sekhmet) ModSecurity Demonstration

In this post, I would like to share a walkthrough of the Sekhmet Machine from Hack the Box This room will be considered an Insane machine on Hack the Box What will you gain from the Sekhmet machine? For the user

Continue ReadingHack The Box: Sekhmet Machine Walkthrough – Insane Difficulty

In this post, I would like to share how to escape the docker environment to obtain Root Privileges Access on the machine itself. However, I did manage to get Root Privileges Access by taking a different route which you can

Continue ReadingHack The Box: (Extension) Docker escape on root privileges

In this post, I would like to share a walkthrough of the Mentor Machine from Hack the Box This room will be considered a medium machine on Hack the Box What will you gain from the Mentor machine? For the user

Continue ReadingHack The Box: Mentor Machine Walkthrough – Medium Difficulty

What is Varnish’s HTTP cache? To be honest, it’s my debut of hearing about the Varnish HTTP cache and my first time exploiting it. As a result, let’s try to learn it together where my thought might be different from

Continue ReadingHack The Box: (Forgot) – Varnish HTTP cache to retrieve any cache

What is JWT? For those who are not familiar with JSON tokens, it’s a method to securely exchange data, especially an LFI attack in which the application uses a JSON object. The purpose of the method is to be used

Continue ReadingHack The Box: (Awkward) To retrieve an LFI with JWT token

In this post, I would like to share a walkthrough of the Awkward Machine from Hack the Box This room will be considered a medium machine on Hack the Box What will you gain from the Awkward machine? For the user

Continue ReadingHack The Box: Awkward Machine Walkthrough – Medium Difficulty