Notes 114
- Hack The Box Handler Stats (Insane Windows)
- Hack The Box RedEye Stats (Hard Windows)
- Hack The Box Unclaimed Stats (Medium Windows)
- Hack The Box Takeoff Stats (Hard Linux)
- Hack The Box DutyBound Stats (Medium Linux)
- Hack The Box Autopilot Stats (Insane Windows)
- Hack The Box Stream Stats (Medium Linux)
- Hack The Box Touch Stats (Easy Windows)
- Hack The Box Layover Stats (Medium Linux)
- Hack The Box Scaffold Stats (Hard Windows)
- Hack The Box TrustFall Stats (Insane Windows)
- Hack The Box Management Stats (Easy Linux)
- Forgotten Infrastructure and Dangling Records
- Exposed Datastores: Redis, Mongo, Elastic, Firebase
- Electron, Desktop Apps and Browser Extensions
- Mobile Application Attack Surface: Android and iOS
- ML Infrastructure and Model Supply Chain
- Prompt Injection and LLM Application Security
- WebSockets, gRPC and GraphQL Authorization
- API Authorization: BOLA, BFLA and Mass Assignment
- SSRF Beyond the Fetch: Renderers, Hooks, Rebinding
- File Uploads, Path Traversal and Archive Extraction
- XML Parsers and Deserialization Gadget Chains
- SQL, NoSQL and Command Injection in Modern Stacks
- JWT, Sessions and Account Recovery
- OAuth, OIDC and SAML: Where Federated Trust Breaks
- DOM XSS, Prototype Pollution and Client-Side Gadgets
- Browser Trust Boundaries: CORS, CSRF and Redirects
- Reverse Proxy and Web Server Misconfigurations
- HTTP Request Smuggling and Cache Attacks
- CI/CD and Software Supply Chain Attack Surface
- Serverless, Queues and CDN Origin Exposure
- Cloud Secrets, Storage and Key Management
- Cloud IAM: Pivoting Between Identities
- Kubernetes Attack Paths: RBAC, Tokens and Identity
- Linux Privilege Escalation and Container Escapes
- Windows Local Privilege Escalation: Seven Paths
- Active Directory Trusts and Lateral Movement Paths
- NTLM Coercion and Relay in Active Directory
- Active Directory Credential Attacks: A Field Reference
- Mobile API Pentesting: App, Protocol and Backend
- Secret Leakage in LLM Applications: Prompts and RAG
- Model Serialization Risks: Pickle, Joblib and PyTorch
- HackingClub Umbrella (Difícil Linux): Stats e Writeup
- HackingClub Planetary (Médio Linux): Stats e Writeup
- MCP Servers as an Attack Surface: Tools and Tokens
- Race Conditions in Web Applications: Finding the Window
- BloodHound Beyond Pretty Graphs: Validating Edges
- Hack The Box BlockSynergy Stats (Insane Linux)
- Server-Side Template Injection: Detection to RCE
- NTLM Relay to AD CS: The ESC8 Attack Explained
- OAuth Account Takeover Chains: state, PKCE and Linking
- HackingClub Gantry (Fácil Linux): Stats e Writeup
- HackingClub Ledgerline (Médio Linux): Stats e Writeup
- HackingClub Reinforcement (Difícil Windows): Stats e Writeup
- HackingClub Bonsai (Insano): Stats e Writeup
- HackingClub Crux (Fácil Linux): Stats e Writeup
- HackingClub Atlantis (Médio Windows): Stats e Writeup
- HackingClub Marionette (Difícil Linux): Stats e Writeup
- HackingClub Ouroboros (Fácil Windows): Stats e Writeup
- HackingClub Journal (Médio Linux): Stats e Writeup
- HackingClub Void (Difícil Linux): Stats e Writeup
- HackingClub Tridente (Fácil Linux): Stats e Writeup
- HackingClub Fragment (Médio Linux): Stats e Writeup
- HackingClub Meridian (Difícil Linux): Stats e Writeup
- HackingClub Mirror (Fácil Linux): Stats e Writeup
- Business Logic Vulnerabilities: Attacking the Rules
- Hack The Box Cobblestone Stats (Insane Linux)
- Hack The Box Hercules Stats (Insane Windows)
- Hack The Box Eloquia Stats (Insane Windows)
- Hack The Box PingPong Stats (Insane Windows)
- Hack The Box Pirate Stats (Hard Windows)
- Hack The Box Garfield Stats (Hard Windows)
- Hack The Box SmartHire Stats (Medium Linux)
- Hack The Box Silentium Stats (Easy Linux)
- AWS IAM for Pentesters: AssumeRole and PassRole Paths
- MSSQL in Active Directory: Linked Servers and Privesc
- Hack The Box DanglingTree Stats (Medium Windows)
- Hack The Box Cohort Stats (Easy Linux)
- Hack The Box DarkZeroReturns Stats (Hard Windows)
- Hack The Box Bedside Stats (Medium Linux)
- Hack The Box Paperwork Stats (Easy Linux)
- Kubernetes for Pentesters: RBAC, Secrets and Pods
- Hack The Box MakeSense Stats (Medium Linux)
- Hack The Box Enigma Stats (Easy Linux)
- Hack The Box Nimbus Stats (Hard Linux)
- Hack The Box Checkpoint Stats (Medium Windows)
- Hack The Box Connected Stats (Easy Linux)
- Hack The Box DevHub Stats (Medium Linux)
- Hack The Box Reactor Stats (Easy Linux)
- AD CS Beyond ESC1: ESC2 Through ESC8 Explained
- Secrets in CI/CD Pipelines: How They Leak
- Golden, Silver and Diamond Tickets in Kerberos
- GraphQL for Pentesters: Schema, Resolvers and Batching
- Kerberos Delegation: Unconstrained, Constrained, RBCD
- GitHub Actions Security: Pwn Requests and Token Abuse
- RBCD Explained: Resource-Based Constrained Delegation
- Blind SSRF: Proving Impact Without Seeing a Response
- NTLM Relay in Practice: SMB, LDAP and HTTP Targets
- API Security for Pentesters: BOLA, BFLA and Beyond
- Shadow Credentials in Active Directory Explained
- Linux Privilege Escalation Beyond sudo -l
- Kerberos for Offensive Security: How the Protocol Works
- SSRF to Cloud Metadata: Reaching IMDS Through One Request
- AD CS ESC1 Explained: Exploiting Certificate Templates
- JWT Attacks for Pentesters: Beyond the none Algorithm
- Active Directory ACL Abuse: From Permission to Domain Admin
- SOC338: Lumma Stealer e DLL side-loading via Click Fix
- SOC335: CVE-2024-49138 explorada no CLFS do Windows
- Memory Manipulation 2: RCE root no Android com Frida
- Enable token privileges without writing the script to disk
- Log4Shell Reverse Shell PoC Walkthrough
- JexBoss: JBoss and Java Deserialization Exploit Tool
- Mimikatz Cheat Sheet and Build Guide
