openssl Archives - Threatninja.net

4 Apr, 2026

Hack The Box: Darkzero Machine – Hard Difficulity

Hard Machine Bloodhound, certif, Certify, Challenges, chisel, evil-winrm, HackTheBox, ligolo, mssqlclient, openssl, Penetration Testing, proxychains, python3, rubeus.exe, secretdump, ticketconverter, Windows

Just completed the DarkZero machine from HackTheBox (Hard difficulty)!

After gaining a foothold on DC02 via a misconfigured MSSQL linked server and escalating to local Administrator using SigmaPotato token impersonation + RunasCs, we successfully captured the user flag from the Administrator’s desktop.

Dumped the domain Administrator NT hash with secretsdump, then used Evil-WinRM to get a full shell as Administrator on DC02 and retrieved the root flag.

#HackTheBox #HTB #Pentesting #ActiveDirectory #RedTeam #CyberSecurity #PrivilegeEscalation …

Learn MoreHack The Box: Darkzero Machine – Hard Difficulity

19 Jul, 2025

Hack The Box: Scepter Machine Walkthrough – Hard Difficulty

Hard Machine ADCS, Bloodhound, bloodyAD, Certipy, Challenges, ESC14, ESC9, evil-winrm, HackTheBox, hashcat, ldapsearch, nfs, openssl, Penetration Testing, showmount, Windows

I conquered the “Scepter” machine on Hack The Box, a challenging Active Directory exploit! Initially, I cracked weak .pfx certificate passwords using pfx2john and rockyou.txt. After syncing time, I extracted D.BAKER’s NTLM hash via Certipy and used BloodHound to reveal A.CARTER’s password reset privileges, exploiting ESC9 to capture the user flag. Subsequently, H.BROWN’s access to P.ADAMS’s altSecurityIdentities enabled an ESC14 attack, forging a certificate for passwordless authentication. Consequently, P.ADAMS’s DCSync rights allowed domain hash extraction, securing the root flag via Evil-WinRM.

#Cybersecurity #HackTheBox #ActiveDirectory #PrivilegeEscalation #CTF #EthicalHacking …

Learn MoreHack The Box: Scepter Machine Walkthrough – Hard Difficulty

17 Jun, 2023

Insane Machine AES, API, base64, bulk_extractor, BurpSuite, Challenges, Cross Protocol Request Forgery, dig, dnsmasq, ftp, ftp smuggling, gobuster, HackTheBox, Incident Handling, javascript, json, LDAP, ldapadd, Linux, openssl, PCAP, Penetration Testing, PHP, pspy64, python3, RsaCtfTool, smtpd, ssh, SSH key, ssrf, Wireshark

31 Mar, 2022

Hack The Box: Timelapse Machine Walkthrough – Easy Difficulty

Easy Machine Active Directory, Challenges, crackmapexec, crackpkcs12, evil-winrm, HackTheBox, john the ripper, laps, openssl, pfx2john, smbclient, Windows, zip2john

Threatninja.net

Threatninja.net

Hack The Box: Darkzero Machine – Hard Difficulity

Hack The Box: Scepter Machine Walkthrough – Hard Difficulty

Hack The Box: Escape machine Walkthrough – Medium Difficulty

Hack The Box: Broscience Machine Walkthrough-Medium Difficulty

Hack The Box: Response Machine Walkthrough – Insane Difficulty

Hack The Box: Timelapse Machine Walkthrough – Easy Difficulty

Threatninja.net

Threatninja.net

Tag Archives: openssl

Hack The Box: Darkzero Machine – Hard Difficulity

Hack The Box: Scepter Machine Walkthrough – Hard Difficulty

Hack The Box: Escape machine Walkthrough – Medium Difficulty

Hack The Box: Broscience Machine Walkthrough-Medium Difficulty

Hack The Box: Response Machine Walkthrough – Insane Difficulty

Hack The Box: Timelapse Machine Walkthrough – Easy Difficulty