Archives

2026

09 Nov Hack The Box Handler Stats (Insane Windows)
09 Nov Hack The Box RedEye Stats (Hard Windows)
28 Oct Hack The Box Unclaimed Stats (Medium Windows)
28 Oct Hack The Box Takeoff Stats (Hard Linux)
28 Oct Hack The Box DutyBound Stats (Medium Linux)
28 Oct Hack The Box Autopilot Stats (Insane Windows)
28 Oct Hack The Box Stream Stats (Medium Linux)
03 Oct Hack The Box Touch Stats (Easy Windows)
26 Sep Hack The Box Layover Stats (Medium Linux)
20 Sep Hack The Box Scaffold Stats (Hard Windows)
20 Sep Hack The Box TrustFall Stats (Insane Windows)
20 Sep Hack The Box Management Stats (Easy Linux)
20 Sep Forgotten Infrastructure and Dangling Records
20 Sep Exposed Datastores: Redis, Mongo, Elastic, Firebase
20 Sep Electron, Desktop Apps and Browser Extensions
20 Sep Mobile Application Attack Surface: Android and iOS
20 Sep ML Infrastructure and Model Supply Chain
20 Sep Prompt Injection and LLM Application Security
20 Sep WebSockets, gRPC and GraphQL Authorization
20 Sep API Authorization: BOLA, BFLA and Mass Assignment
20 Sep SSRF Beyond the Fetch: Renderers, Hooks, Rebinding
20 Sep File Uploads, Path Traversal and Archive Extraction
20 Sep XML Parsers and Deserialization Gadget Chains
20 Sep SQL, NoSQL and Command Injection in Modern Stacks
20 Sep JWT, Sessions and Account Recovery
20 Sep OAuth, OIDC and SAML: Where Federated Trust Breaks
20 Sep DOM XSS, Prototype Pollution and Client-Side Gadgets
20 Sep Browser Trust Boundaries: CORS, CSRF and Redirects
20 Sep Reverse Proxy and Web Server Misconfigurations
20 Sep HTTP Request Smuggling and Cache Attacks
20 Sep CI/CD and Software Supply Chain Attack Surface
20 Sep Serverless, Queues and CDN Origin Exposure
20 Sep Cloud Secrets, Storage and Key Management
20 Sep Cloud IAM: Pivoting Between Identities
20 Sep Kubernetes Attack Paths: RBAC, Tokens and Identity
20 Sep Linux Privilege Escalation and Container Escapes
20 Sep Windows Local Privilege Escalation: Seven Paths
20 Sep Active Directory Trusts and Lateral Movement Paths
20 Sep NTLM Coercion and Relay in Active Directory
20 Sep Active Directory Credential Attacks: A Field Reference
18 Sep Mobile API Pentesting: App, Protocol and Backend
15 Sep Secret Leakage in LLM Applications: Prompts and RAG
14 Sep Ronin66 Matrioska Writeup
11 Sep Ronin66 Dungeon Writeup
11 Sep Model Serialization Risks: Pickle, Joblib and PyTorch
10 Sep Ronin66 Recovery Writeup
10 Sep Ronin66 Poet Writeup
10 Sep HackingClub Umbrella (Difícil Linux): Stats e Writeup
10 Sep HackingClub Planetary (Médio Linux): Stats e Writeup
09 Sep Ronin66 Buoy Writeup
08 Sep MCP Servers as an Attack Surface: Tools and Tokens
04 Sep Race Conditions in Web Applications: Finding the Window
01 Sep BloodHound Beyond Pretty Graphs: Validating Edges
28 Aug Hack The Box BlockSynergy Stats (Insane Linux)
28 Aug Server-Side Template Injection: Detection to RCE
25 Aug NTLM Relay to AD CS: The ESC8 Attack Explained
21 Aug OAuth Account Takeover Chains: state, PKCE and Linking
21 Aug HackingClub Gantry (Fácil Linux): Stats e Writeup
21 Aug HackingClub Ledgerline (Médio Linux): Stats e Writeup
21 Aug HackingClub Reinforcement (Difícil Windows): Stats e Writeup
21 Aug HackingClub Bonsai (Insano): Stats e Writeup
21 Aug HackingClub Crux (Fácil Linux): Stats e Writeup
21 Aug HackingClub Atlantis (Médio Windows): Stats e Writeup
21 Aug HackingClub Marionette (Difícil Linux): Stats e Writeup
21 Aug HackingClub Ouroboros (Fácil Windows): Stats e Writeup
21 Aug HackingClub Journal (Médio Linux): Stats e Writeup
21 Aug HackingClub Void (Difícil Linux): Stats e Writeup
21 Aug HackingClub Tridente (Fácil Linux): Stats e Writeup
21 Aug HackingClub Fragment (Médio Linux): Stats e Writeup
21 Aug HackingClub Meridian (Difícil Linux): Stats e Writeup
21 Aug HackingClub Mirror (Fácil Linux): Stats e Writeup
18 Aug Business Logic Vulnerabilities: Attacking the Rules
15 Aug Hack The Box Cobblestone Stats (Insane Linux)
15 Aug Hack The Box Hercules Stats (Insane Windows)
15 Aug Hack The Box Eloquia Stats (Insane Windows)
15 Aug Hack The Box PingPong Stats (Insane Windows)
15 Aug Hack The Box Pirate Stats (Hard Windows)
15 Aug Hack The Box Garfield Stats (Hard Windows)
15 Aug Hack The Box SmartHire Stats (Medium Linux)
15 Aug Hack The Box Silentium Stats (Easy Linux)
14 Aug AWS IAM for Pentesters: AssumeRole and PassRole Paths
11 Aug MSSQL in Active Directory: Linked Servers and Privesc
07 Aug Hack The Box DanglingTree Stats (Medium Windows)
07 Aug Hack The Box Cohort Stats (Easy Linux)
07 Aug Hack The Box DarkZeroReturns Stats (Hard Windows)
07 Aug Hack The Box Bedside Stats (Medium Linux)
07 Aug Hack The Box Paperwork Stats (Easy Linux)
07 Aug Kubernetes for Pentesters: RBAC, Secrets and Pods
07 Aug Hack The Box MakeSense Stats (Medium Linux)
07 Aug Hack The Box Enigma Stats (Easy Linux)
07 Aug Hack The Box Nimbus Stats (Hard Linux)
07 Aug Hack The Box Checkpoint Stats (Medium Windows)
07 Aug Hack The Box Connected Stats (Easy Linux)
07 Aug Hack The Box DevHub Stats (Medium Linux)
07 Aug Hack The Box Reactor Stats (Easy Linux)
04 Aug AD CS Beyond ESC1: ESC2 Through ESC8 Explained
31 Jul Secrets in CI/CD Pipelines: How They Leak
28 Jul Golden, Silver and Diamond Tickets in Kerberos
24 Jul GraphQL for Pentesters: Schema, Resolvers and Batching
21 Jul Kerberos Delegation: Unconstrained, Constrained, RBCD
17 Jul GitHub Actions Security: Pwn Requests and Token Abuse
14 Jul RBCD Explained: Resource-Based Constrained Delegation
10 Jul Blind SSRF: Proving Impact Without Seeing a Response
07 Jul NTLM Relay in Practice: SMB, LDAP and HTTP Targets
03 Jul API Security for Pentesters: BOLA, BFLA and Beyond
30 Jun Shadow Credentials in Active Directory Explained
26 Jun Linux Privilege Escalation Beyond sudo -l
23 Jun Kerberos for Offensive Security: How the Protocol Works
19 Jun SSRF to Cloud Metadata: Reaching IMDS Through One Request
16 Jun AD CS ESC1 Explained: Exploiting Certificate Templates
12 Jun JWT Attacks for Pentesters: Beyond the none Algorithm
09 Jun Active Directory ACL Abuse: From Permission to Domain Admin
28 Jan OffSec Proving Grounds Mice Writeup (Windows)
28 Jan OffSec Proving Grounds Fired Writeup
27 Jan OffSec Proving Grounds Monster Writeup
27 Jan OffSec Proving Grounds Medjed Writeup
27 Jan OffSec Proving Grounds Lavita Writeup
26 Jan OffSec Proving Grounds Hokkaido Writeup (AD)
25 Jan SOC338: Lumma Stealer e DLL side-loading via Click Fix
22 Jan OffSec Proving Grounds Law Writeup
22 Jan OffSec Proving Grounds Slort Writeup (Windows)
22 Jan OffSec Proving Grounds Nagoya Writeup
21 Jan Hack The Box LustrousTwo Writeup (Hard Windows)
20 Jan OffSec Proving Grounds Extplorer Writeup
20 Jan OffSec Proving Grounds Shenzi Writeup
20 Jan OffSec Proving Grounds Hub Writeup (FuguHub RCE)
19 Jan OffSec Proving Grounds Hepet Writeup (Windows)
18 Jan OffSec Proving Grounds Access Writeup
17 Jan OffSec Proving Grounds Squid Writeup (Windows)
17 Jan OffSec Proving Grounds DVR4 Writeup
16 Jan OffSec Proving Grounds Kevin Writeup
16 Jan OffSec Proving Grounds Jacko Writeup
16 Jan OffSec Proving Grounds Resourced Writeup
15 Jan OffSec Proving Grounds Internal Writeup
15 Jan OffSec Proving Grounds Hutch Writeup (Windows)
15 Jan Hack The Box Broker Writeup (Easy Linux)
14 Jan OffSec Proving Grounds AuthBy Writeup
10 Jan OffSec Proving Grounds Astronaut Writeup
10 Jan OffSec Proving Grounds Twiggy Writeup
10 Jan OffSec Proving Grounds Exfiltrated Writeup
10 Jan OffSec Proving Grounds Cockpit Writeup
10 Jan OffSec Proving Grounds Clue Writeup (Linux)
10 Jan Hack The Box Browsed Writeup (Medium Linux)
10 Jan OffSec Proving Grounds Pelican Writeup
10 Jan OffSec Proving Grounds Boolean Writeup
03 Jan Hack The Box Secnotes Writeup

2025

26 Dec React2Shell: RCE com CVSS 10.0 no Next.js
25 Dec Hack The Box Doctor Writeup
22 Dec Hack The Box Obscurity Writeup (Medium Linux)
22 Dec Hack The Box Time Writeup (Medium Linux)
22 Dec Hack The Box Admirer Writeup
21 Dec SOC335: CVE-2024-49138 explorada no CLFS do Windows
20 Dec Hack The Box Cascade Writeup
18 Dec Hack The Box Mango Writeup
18 Dec Hack The Box Magic Writeup
17 Dec Hack The Box Networked Writeup (Easy Linux)
17 Dec Hack The Box Monteverde Writeup
17 Dec Hack The Box Resolute Writeup (Medium Windows)
17 Dec Hack The Box Shoppy Writeup (Easy Linux)
17 Dec CVE-2025-66224: escrita de arquivo no OrangeHRM (PoC)
16 Dec Hack The Box Jeeves Writeup (Medium Windows)
15 Dec Hack The Box Bastard Writeup (Medium Windows)
15 Dec Hack The Box Conversor Writeup (Easy Linux)
14 Dec Hack The Box Soulmate Writeup (Easy Linux)
13 Dec Hack The Box Remote Writeup (Easy Windows)
12 Dec Hack The Box Postman Writeup (Easy Linux)
12 Dec Hack The Box Blunder Writeup (Easy Linux)
12 Dec Hack The Box TraceBack Writeup (Easy Linux)
11 Dec Hack The Box Traverxec Writeup (Easy Linux)
10 Dec Hack The Box Buff Writeup (Easy Windows)
10 Dec Hack The Box Toolbox Writeup (Easy Windows)
08 Dec Hack The Box Gavel Writeup (Medium Linux)
06 Dec Hack The Box Ransom Writeup (Medium Linux)
05 Dec Hack The Box Bounty Writeup (Easy Windows)
05 Dec Hack The Box Love Writeup (Easy Windows)
04 Dec Hack The Box OpenSource Writeup (Easy Linux)
03 Dec Hack The Box MetaTwo Writeup (Easy Linux)
30 Nov Hack The Box Guardian Writeup (Hard Linux)
28 Nov Hack The Box NodeBlog Writeup (Easy Linux)
27 Nov Hack The Box Delivery Writeup (Easy Linux)
27 Nov Hack The Box Tabby Writeup (Easy Linux)
26 Nov Hack The Box Passage Writeup (Medium Linux)
24 Nov Hack The Box Ten Writeup (Hard Linux)
23 Nov Hack The Box Redelegate Writeup
21 Nov CVE-2025-63406: RCE no Group Office via eval() (PoC)
21 Nov Hack The Box VulnCicada Writeup
19 Nov Hack The Box Shibuya Writeup
18 Nov Hack The Box Academy Writeup
15 Nov Hack The Box SwagShop Writeup (Easy Linux)
14 Nov Hack The Box EscapeTwo Writeup (Easy Windows)
13 Nov OffSec Stapler Writeup: WordPress LFI to root
11 Nov Hack The Box Support Writeup (Easy Windows)
11 Nov Hack The Box SteamCloud Writeup (Easy Linux)
10 Nov Hack The Box Curling Writeup (Easy Linux)
10 Nov Hack The Box GoodGames Writeup (Easy Linux)
06 Nov Hack The Box Alert Writeup (Easy Linux)
05 Nov Hack The Box Celestial Writeup (Medium Linux)
05 Nov Hack The Box Nunchucks Writeup (Easy Linux)
01 Nov Hack The Box Explore Writeup (Easy Android)
28 Oct Hack The Box Sense Writeup (Easy pfSense)
27 Oct Hack The Box Bank Writeup (Easy Linux)
24 Oct Hack The Box Bruno Writeup (Medium Windows)
23 Oct Hack The Box Arctic Writeup (Easy Windows)
22 Oct Hack The Box Mirai Writeup (Easy Linux)
22 Oct Hack The Box Photobomb Writeup (Easy Linux)
22 Oct Hack The Box Squashed Writeup (Easy Linux)
21 Oct Hack The Box Breach Writeup (Medium Windows)
21 Oct Hack The Box Wifinetic Writeup (Easy Linux)
21 Oct Hack The Box Return Writeup (Easy Windows)
21 Oct Hack The Box Antique Writeup (Easy Linux)
20 Oct Hack The Box Keeper Writeup (Easy Linux)
17 Oct Hack The Box Sweep Writeup (Medium Windows)
14 Oct Hack The Box Pandora Writeup (Easy Linux)
14 Oct Hack The Box Soccer Writeup (Easy Linux)
13 Oct Hack The Box Help Writeup (Easy Linux)
12 Oct Hack The Box UpDown Writeup (Medium Linux)
10 Oct Hack The Box Phantom Writeup (Medium Windows)
09 Oct Hack The Box Escape Writeup
03 Oct Hack The Box Job Writeup
02 Oct Hack The Box Sendai Writeup (Medium Windows)
01 Oct TryHackMe Wreath Writeup: pivoting a three host network
29 Sep Hack The Box Delegate Writeup
28 Sep Hack The Box BabyTwo Writeup
27 Sep Hack The Box Data Writeup
26 Sep Hack The Box Reset Writeup
24 Sep Hack The Box RetroTwo Writeup
23 Sep Hack The Box Manage Writeup
22 Sep Hack The Box Forgotten Writeup
20 Sep Hack The Box Down Writeup
19 Sep Hack The Box Baby Writeup
18 Sep Hack The Box VulnEscape Writeup
18 Sep Hack The Box Lock Writeup
17 Sep Memory Manipulation 2: RCE root no Android com Frida
17 Sep Hack The Box Retro Writeup (Easy Windows)
16 Sep Enable token privileges without writing the script to disk
08 Sep Hack The Box Titanic Writeup (Easy Linux)
29 Aug Hack The Box Voleur Writeup (Medium Windows)
15 Aug HackingClub Squirrel Writeup (Medium Windows)
15 Jul Hack The Box Scrambled Writeup (Medium Windows)
08 Jul Hack The Box Rebound Writeup
02 Jul Reviewing TryHackMe's PT1 Certification
01 Jul Hack The Box RustyKey Writeup (Hard Windows)
19 Jun TryHackMe Services Writeup (Windows AD)
19 Jun TryHackMe Ledger Writeup (Windows AD)
11 Jun Hack The Box Scepter Writeup (Hard Windows)
06 Jun Hack The Box Planning Writeup (Easy Linux)
04 Jun Hack The Box Haze Writeup (Hard Windows)
04 Jun Hack The Box Fluffy Writeup (Easy Windows)
01 Jun Hack The Box Flight Writeup
24 May Hack The Box Puppy Writeup
11 May Hack The Box Reel Writeup
01 May Hack The Box Rabbit Writeup
23 Apr Hack The Box Mantis Writeup
20 Apr Hack The Box Sizzle Writeup
06 Apr Hack The Box Craft Writeup (Medium Linux)
30 Mar Hack The Box Bastion Writeup (Easy Windows)
28 Mar Hack The Box Vintage Writeup (Hard Windows)
17 Mar Hack The Box Heal Writeup (Medium Linux)
10 Mar Hack The Box Dog Writeup (Easy Linux)
20 Feb Hack The Box Sauna Writeup (Easy Windows)
19 Feb Hack The Box Heist Writeup (Easy Windows)
10 Jan Hack The Box Blackfield Writeup (Hard Windows)
06 Jan Hack The Box GoBox Writeup (Medium Linux)

2024

31 Dec Hack The Box LinkVortex Writeup (Easy Linux)
31 Dec Hack The Box Administrator Writeup (Medium Windows)
04 Nov Hack The Box Sightless Writeup (Easy Linux)
30 Oct Hack The Box GreenHorn Writeup (Easy Linux)
29 Oct Hack The Box Chemistry Writeup (Easy Linux)
28 Oct Hack The Box Cicada Writeup (Easy Windows)
05 Jun Hack The Box Freelancer Writeup (Hard Windows)
14 May Hack The Box SolarLab Writeup (Medium Windows)
22 Apr Hack The Box Runner Writeup (Medium Linux)
20 Apr Hack The Box Jab Writeup (Medium Windows)
15 Apr Hack The Box Usage Writeup (Easy Linux)
12 Apr Hack The Box Hospital Writeup (Medium Windows)
09 Apr Hack The Box IClean Writeup (Medium Linux)
04 Apr Hack The Box WifineticTwo Writeup (Medium Linux)
26 Mar Hack The Box Monitors Writeup (Hard Linux)
25 Mar Hack The Box Headless Writeup (Easy Linux)
22 Mar Hack The Box FormulaX Writeup (Hard Linux)
20 Mar Hack The Box Skyfall Writeup (Insane Linux)
16 Mar Hack The Box Registry Writeup (Hard Linux)
13 Mar Hack The Box Jarvis Writeup (Medium Linux)
05 Feb Log4Shell Reverse Shell PoC Walkthrough
05 Feb Hack The Box Hawk Writeup (Medium Linux)
05 Feb Hack The Box Popcorn Writeup (Medium Linux)
05 Feb Hack The Box SolidState Writeup (Medium Linux)
05 Feb Hack The Box Poison Writeup (Medium FreeBSD)
05 Feb Hack The Box Optimum Writeup (Easy Windows)
05 Feb Hack The Box Falafel Writeup (Hard Linux)
05 Feb Hack The Box Blocky Writeup (Easy Linux)
05 Feb Hack The Box Netmon Writeup (Easy Windows)
05 Feb TryHackMe Advent of Cyber 2023 Side Quest 1 Writeup
05 Feb JexBoss: JBoss and Java Deserialization Exploit Tool
02 Feb Hack The Box Haircut Writeup (Medium Linux)
02 Feb Hack The Box Gofer Writeup (Hard Linux)
02 Feb Hack The Box Snoopy Writeup (Hard Linux)
02 Feb Hack The Box Cronos Writeup (Medium Linux)
02 Feb Hack The Box Joker Writeup (Hard Linux)
02 Feb Hack The Box Clicker Writeup (Medium Linux)
02 Feb Hack The Box Authority Writeup (Medium Windows)
02 Feb Hack The Box Sunday Writeup (Easy Solaris)
25 Jan Hack The Box Stocker Writeup (Easy Linux)
25 Jan TryHackMe Bugged Writeup (MQTT Broker)
25 Jan Hack The Box BountyHunter Writeup (Easy Linux)
25 Jan Hack The Box PC Writeup (Easy Linux)
25 Jan TryHackMe Wekor Writeup (WordPress and Memcached)
25 Jan TryHackMe Harder Writeup
25 Jan TryHackMe Plotted-EMR Writeup
25 Jan TryHackMe Borderlands Writeup (BGP Hijacking)
25 Jan TryHackMe Watcher Writeup (Linux)
25 Jan Hack The Box Bizness Writeup (Easy Linux)
25 Jan Hack The Box OnlyForYou Writeup (Medium Linux)
25 Jan ZoneMinder RCE and zmupdate.pl Root Escalation
25 Jan Hack The Box Codify Writeup (Easy Linux)
25 Jan Hack The Box Sandworm Writeup (Medium Linux)
25 Jan Hack The Box Manager Writeup (Easy Windows)
25 Jan EternalBlue MS17-010 SMB Exploitation Walkthrough
25 Jan Hack The Box CozyHosting Writeup (Easy Linux)
25 Jan TryHackMe Biohazard Writeup (Resident Evil Room)
25 Jan TryHackMe Jeff Writeup (Hard Linux)
25 Jan Mimikatz Cheat Sheet and Build Guide
25 Jan TryHackMe Ra Writeup
25 Jan TryHackMe Holo Network Writeup (Active Directory)