• Search for:

    Tag Archives: gobuster

    1. Home  - 
    2. Posts tagged "gobuster"
      3. ( Page2 )
    31 May, 2025
    Hack The Box: Checker Machine Walkthrough – Hard Difficulty
    Hard Machine , , , , , , , , , , , ,

    Successfully exploited CVE-2023-1545 in Teampass to extract user credentials and leveraged CVE-2023-6199 in BookStack to obtain an OTP, gaining user-level access on the Checker machine. Privilege escalation was achieved by exploiting a sudo script interacting with shared memory, setting the SUID bit on /bin/bash to capture the root flag. A great example of combining application vulnerabilities with creative privilege escalation techniques!

    #Cybersecurity #EthicalHacking #HackTheBox #PenetrationTesting #InfoSec #VulnerabilityResearch #PrivilegeEscalation #CTF #SecurityResearch …

    Learn MoreHack The Box: Checker Machine Walkthrough – Hard Difficulty

    10 May, 2025
    Hack The Box: Underpass Machine Walkthrough – Easy Difficulty
    Easy Machine , , , , , , , , ,

    Successfully completed the “Underpass” machine on Hack The Box! For the user flag, I enumerated SNMP to discover a Daloradius instance, logged in with default credentials, cracked an MD5-hashed password for the svcMosh account, and used SSH to access the user flag in its home directory. To capture the root flag, I escalated privileges by exploiting sudo permissions on mosh-server, obtaining a session key and port to establish a root session and retrieve the flag from /root/root.txt.

    #Cybersecurity #HackTheBox #CaptureTheFlag #PenetrationTesting #LinuxSecurity #PrivilegeEscalation #SNMP #Daloradius #EthicalHacking #InformationSecurity …

    Learn MoreHack The Box: Underpass Machine Walkthrough – Easy Difficulty

    3 May, 2025
    HackTheBox – BigBang Machine Walkthrough (Hard Difficulty)
    Hard Machine , , , , , , , , , , , , , , , , , , , , ,

    Chained exploitation through misconfigured web app and internal services. We started by exploiting a WordPress plugin vulnerability (CVE-2023-26326) to upload files, followed by a file read vulnerability (CVE-2024-2961) for remote code execution. From there, we cracked the database credentials, gained SSH access as the shawking user, and leveraged a vulnerable API endpoint to escalate to root. This highlights how overlooked configurations and service misconfigurations can lead to a full server compromise.

    #CTF #PrivilegeEscalation #WebSecurity #CommandInjection #SSH #WordPress #LinuxPentesting #BugBounty #HackTheBox #RedTeam #CyberSecurity …

    Learn MoreHackTheBox – BigBang Machine Walkthrough (Hard Difficulty)

    8 Feb, 2025
    HackTheBox:MagicGardens Machine Walkthrough-Insane Difficulty
    Insane Machine , , , , , , , , , , , , , ,

    Introduction to MagicGardens: This write-up will explore the “MagicGardens” machine from Hack The Box, which is categorized as an insanely difficult challenge. This walkthrough will cover the reconnaissance, exploitation, and privilege escalation steps required to capture the flag. Objective on

    Continue ReadingHackTheBox:MagicGardens Machine Walkthrough-Insane Difficulty

    1 Feb, 2025
    Hack The Box: Trickster Machine Walkthrough – Medium Difficulty
    Medium Machine , , , , , , , , , , , , , , , , , , , , , ,

    Introduction to Trickster: In this write-up, we will explore the “Trickster” machine from Hack The Box, categorized as a medium-difficulty challenge. This walkthrough will cover the reconnaissance, exploitation, and privilege escalation steps required to capture the flag. The objective of

    Continue ReadingHack The Box: Trickster Machine Walkthrough – Medium Difficulty

    18 Jan, 2025
    Hack The Box: MonitorsThree Machine Walkthrough – Medium Difficulty
    Medium Machine , , , , , , , , , , , , , , , ,

    Introduction to MonitorsThree: This write-up will explore the “Monitorsthree” machine from Hack The Box, categorized as an easy difficulty challenge. This walkthrough will cover the reconnaissance, exploitation, and privilege escalation steps required to capture the flag. Objective on Monitorsthree: The

    Continue ReadingHack The Box: MonitorsThree Machine Walkthrough – Medium Difficulty

    21 Dec, 2024
    Hack The Box: Sea Machine Walkthrough – Easy Difficulty
    Easy Machine , , , , , , , , , ,

    Introduction to Sea: This write-up will explore the “Sea” machine from Hack The Box, categorized as an easy difficulty challenge. This walkthrough will cover the reconnaissance, exploitation, and privilege escalation steps required to capture the flag. Objective: The goal of

    Continue ReadingHack The Box: Sea Machine Walkthrough – Easy Difficulty

    9 Nov, 2024
    Hack The Box: Blazorized Machine Walkthrough – Hard Difficulty
    Hard Machine , , , , , , , , , ,

    Introduction to Blazorized: This write-up will explore the “Blazorized” machine from Hack The Box, categorized as a Hard difficulty challenge. This walkthrough will cover the reconnaissance, exploitation, and privilege escalation steps required to capture the flag. Objective on Blazorized machine:

    Continue ReadingHack The Box: Blazorized Machine Walkthrough – Hard Difficulty

    2 Nov, 2024
    Hack The Box: Permx Machine Walkthrough – Easy Difficulty
    Easy Machine , , , , , , , , , , ,

    Introduction to Permx: In this write-up, we will explore the “Permx” machine from Hack The Box, categorized as an easy difficulty challenge. This walkthrough will cover the reconnaissance, exploitation, and privilege escalation steps required to capture the flag. Objective: The

    Continue ReadingHack The Box: Permx Machine Walkthrough – Easy Difficulty

    19 Oct, 2024
    Hack The Box: Editorial Machine Walkthrough – Easy Difficulty
    Easy Machine , , , , , , , , ,

    Introduction to Editorial: In this write-up, we will explore the “Editorial” machine from Hack The Box, categorized as an easy difficulty challenge. This walkthrough will cover the reconnaissance, exploitation, and privilege escalation steps required to capture the flag. Objective: The

    Continue ReadingHack The Box: Editorial Machine Walkthrough – Easy Difficulty