javascript Archives - Threatninja.net

24 Jan, 2026

Hack The Box: Imagery Machine Walkthrough – Medium Difficulity

Medium Machine backup recovery, BurpSuite, Challenges, Charcol, HackTheBox, hashcat, javascript, json, Linux, Local File Inclusion (LFI), Penetration Testing, python3, RCE, ssh

Just completed the Imagery machine on Hack The Box (Medium). The challenge involved identifying weaknesses in a custom web application, analysing exposed application logic and data, and chaining these issues to move laterally within the system to gain user-level access. Further investigation highlighted how overlooked privilege boundaries and misconfigured trusted utilities can be abused to escalate privileges and obtain full administrative control.

#HackTheBox #CyberSecurity #WebSecurity #EthicalHacking #PenetrationTesting #PrivilegeEscalation #CTF #InfoSec
…

Learn MoreHack The Box: Imagery Machine Walkthrough – Medium Difficulity

14 Oct, 2023

Hack The Box: Intentions Machine Walkthrough – Hard Difficulty

Hard Machine BurpSuite, Challenges, git log, gobuster, HackTheBox, javascript, linpeas, Linux, Penetration Testing, SQL Injection, sqlmap, ssh

19 Aug, 2023

Hack The Box: Mailroom Machine Walkthrough – Hard Difficulty

Hard Machine BurpSuite, Challenges, chisel, Cross Site Scripting, HackTheBox, javascript, kpcli, Linux, port forwarding, pspy64, ssh, ssrf, strace

6 Feb, 2023

Hack The Box: Response Machine Walkthrough – Insane Difficulty

Insane Machine AES, API, base64, bulk_extractor, BurpSuite, Challenges, Cross Protocol Request Forgery, dig, dnsmasq, ftp, ftp smuggling, gobuster, HackTheBox, Incident Handling, javascript, json, LDAP, ldapadd, Linux, openssl, PCAP, Penetration Testing, PHP, pspy64, python3, RsaCtfTool, smtpd, ssh, SSH key, ssrf, Wireshark

18 Apr, 2022

HackTheBox: Talkative Machine Walkthrough – Hard Difficulty

Hard Machine base64, boltcms, Challenges, chisel, curl, docker, gcc, gobuster, HackTheBox, jamovi, jamovi R language, javascript, json, mongodb, mongosh, Penetration Testing, port forwarding, pwncat-cs, rocketchat, shocker exploit, ssh, ssti, webhook