In this post, I would like to share a weakness of ModSecurity that has been used within the Sekhmet Machine. The full writeup on the Sekhmet machine can be found here What is ModSecurity? For those who are not familiar

Continue ReadingHack The Box: (Sekhmet) ModSecurity Demonstration

In this post, I would like to share a walkthrough of the Sekhmet Machine from Hack the Box This room will be considered an Insane machine on Hack the Box What will you gain from the Sekhmet machine? For the user

Continue ReadingHack The Box: Sekhmet Machine Walkthrough – Insane Difficulty

In this post, I would like to share how to escape the docker environment to obtain Root Privileges Access on the machine itself. However, I did manage to get Root Privileges Access by taking a different route which you can

Continue ReadingHack The Box: (Extension) Docker escape on root privileges

In this post, I would like to share a walkthrough of the Mentor Machine from Hack the Box This room will be considered a medium machine on Hack the Box What will you gain from the Mentor machine? For the user

Continue ReadingHack The Box: Mentor Machine Walkthrough – Medium Difficulty

What is Varnish’s HTTP cache? To be honest, it’s my debut of hearing about the Varnish HTTP cache and my first time exploiting it. As a result, let’s try to learn it together where my thought might be different from

Continue ReadingHack The Box: (Forgot) – Varnish HTTP cache to retrieve any cache

What is JWT? For those who are not familiar with JSON tokens, it’s a method to securely exchange data, especially an LFI attack in which the application uses a JSON object. The purpose of the method is to be used

Continue ReadingHack The Box: (Awkward) To retrieve an LFI with JWT token

In this post, I would like to share a walkthrough of the Awkward Machine from Hack the Box This room will be considered a medium machine on Hack the Box What will you gain from the Awkward machine? For the user

Continue ReadingHack The Box: Awkward Machine Walkthrough – Medium Difficulty

In this post, I would like to share a walkthrough of the Rainyday Machine from Hack the Box This room will be considered a Hard machine on Hack the Box What will you gain from the RainyDay machine? For the user

Continue ReadingHack The Box: Rainyday Machine Walkthrough – Hard Difficulty

What is Path Hijacking? Path Hijacking is a method where the bad guys will try to execute their malicious payload by running it from a different path than they are in at that moment. Let’s look at it this way

Continue ReadingHack the Box: (Photobomb machine) – Path Hijacking

In this post, I would like to share a walkthrough of the Photobomb Machine from Hack the Box This room will be considered an Easy machine on Hack the Box What will you gain from the PhotoBomb machine? For the user

Continue ReadingHack The Box: Photobomb Machine Walkthrough – Easy Difficulty