• Search for:

    Tag Archives: port forwarding

    1. Home  - 
    2. Posts tagged "port forwarding"
      3. ( Page2 )
    3 May, 2025
    HackTheBox – BigBang Machine Walkthrough (Hard Difficulty)
    Hard Machine , , , , , , , , , , , , , , , , , , , , ,

    Chained exploitation through misconfigured web app and internal services. We started by exploiting a WordPress plugin vulnerability (CVE-2023-26326) to upload files, followed by a file read vulnerability (CVE-2024-2961) for remote code execution. From there, we cracked the database credentials, gained SSH access as the shawking user, and leveraged a vulnerable API endpoint to escalate to root. This highlights how overlooked configurations and service misconfigurations can lead to a full server compromise.

    #CTF #PrivilegeEscalation #WebSecurity #CommandInjection #SSH #WordPress #LinuxPentesting #BugBounty #HackTheBox #RedTeam #CyberSecurity …

    Learn MoreHackTheBox – BigBang Machine Walkthrough (Hard Difficulty)

    22 Mar, 2025
    Hack The Box: Alert Machine Walkthrough – Easy Difficulty
    Easy Machine , , , , , , , , , , ,

    We discovered an XSS vulnerability in .md file uploads and the Contacts tab. By embedding an XSS payload and sharing the link, we extracted data from messages.php, revealing a file parameter vulnerable to LFI. This led us to /var/www/statistics.alert.htb/.htpasswd, which contained a hashed password. Using hashid, we identified it as MD5 (APR1-MD5) and cracked it with Hashcat, retrieving the password ManchesterUnited. With these credentials, we accessed the system and captured the user flag.

    After logging into statistics.alert.htb, we found port 8080 open. Using SSH port forwarding, we accessed a monitoring site but needed to locate its directory. Checking ps aux, we found it in /opt/website-monitor. We confirmed file access by testing a basic PHP file, which worked. We then uploaded a PentestMonkey reverse shell, but it didn’t execute. To ensure success, we crafted a reliable PHP shell, triggered it, and gained root access.

    🔍 #CyberSecurity #BugBounty #EthicalHacking #PenTesting #CTF #HTB #WebSecurity #XSS #LFI #PrivilegeEscalation #Hacking …

    Learn MoreHack The Box: Alert Machine Walkthrough – Easy Difficulty

    1 Feb, 2025
    Hack The Box: Trickster Machine Walkthrough – Medium Difficulty
    Medium Machine , , , , , , , , , , , , , , , , , , , , , ,

    Introduction to Trickster: In this write-up, we will explore the “Trickster” machine from Hack The Box, categorized as a medium-difficulty challenge. This walkthrough will cover the reconnaissance, exploitation, and privilege escalation steps required to capture the flag. The objective of

    Continue ReadingHack The Box: Trickster Machine Walkthrough – Medium Difficulty

    18 Jan, 2025
    Hack The Box: MonitorsThree Machine Walkthrough – Medium Difficulty
    Medium Machine , , , , , , , , , , , , , , , ,

    Introduction to MonitorsThree: This write-up will explore the “Monitorsthree” machine from Hack The Box, categorized as an easy difficulty challenge. This walkthrough will cover the reconnaissance, exploitation, and privilege escalation steps required to capture the flag. Objective on Monitorsthree: The

    Continue ReadingHack The Box: MonitorsThree Machine Walkthrough – Medium Difficulty

    11 Jan, 2025
    Hack The Box: Sightless Machine Walkthrough – Easy Difficulty
    Easy Machine , , , , , , , , , , , , , ,

    Introduction to Sightless: In this write-up, we will explore the “Sightless” machine from Hack the Box, categorized as an easy difficulty challenge. This walkthrough will cover the reconnaissance, exploitation, and privilege escalation steps required to capture the flag. Objective: The

    Continue ReadingHack The Box: Sightless Machine Walkthrough – Easy Difficulty

    21 Dec, 2024
    Hack The Box: Sea Machine Walkthrough – Easy Difficulty
    Easy Machine , , , , , , , , , ,

    Introduction to Sea: This write-up will explore the “Sea” machine from Hack The Box, categorized as an easy difficulty challenge. This walkthrough will cover the reconnaissance, exploitation, and privilege escalation steps required to capture the flag. Objective: The goal of

    Continue ReadingHack The Box: Sea Machine Walkthrough – Easy Difficulty

    30 Jun, 2024
    Hack The Box: Jab Machine Walkthrough – Medium Difficulty
    Medium Machine , , , , , , , , ,

    In this post, I would like to share a walkthrough of the Jab Machine from Hack the Box This room will be considered a medium machine on Hack the Box What will you gain from the Jab machine? For the user flag, you need to

    Continue ReadingHack The Box: Jab Machine Walkthrough – Medium Difficulty

    22 Jun, 2024
    Hack The Box: Office Machine Walkthrough – Hard Difficulty
    Hard Machine , , , , , , , , , , , , ,

    In this post, I would like to share a walkthrough of the Office Machine from Hack the Box This room will be considered a Hard machine on Hack the Box What will you gain from the Office machine? For the user flag, you need to

    Continue ReadingHack The Box: Office Machine Walkthrough – Hard Difficulty

    8 Jun, 2024
    Hack The Box: POV Machine Walkthrough – Medium Difficulty
    Medium Machine , , , , , , , , , , , ,

    In this post, I would like to share a walkthrough of the Pov Machine from Hack the Box This room will be considered a medium machine on Hack the Box What will you gain from the Pov machine? For the user flag, you must to

    Continue ReadingHack The Box: POV Machine Walkthrough – Medium Difficulty

    18 May, 2024
    Hack The Box: Ouija Machine Walkthrough – Insane Difficulty
    Insane Machine , , , , , , , , , , , , ,

    In this post, I would like to share a walkthrough of the Ouija Machine from Hack the Box This room will be considered an Insane machine on Hack the Box What will you gain from the Ouija machine? For the user flag, you must abuse

    Continue ReadingHack The Box: Ouija Machine Walkthrough – Insane Difficulty