2026-01-03 7 min
[writeup]
Hack The Box Secnotes Writeup
Medium Windows box. CSRF and blind XSS in a note-sharing app steal admin credentials, SMB write plants an ASPX webshell, and WSL history leaks the admin.
tail -f /var/log/hos
retired boxes, exploit notes, tooling we wrote because nothing else did the job.
324
posts
11
authors
weekly
cadence
grep all HackTheBox OSCP Preparation Privilege Escalation Linux Web Windows RCE Easy Active Directory Information Disclosure SSH Medium
> latest
2025-12-25 4 min
[writeup]
Hack The Box Doctor Writeup
Easy Linux box. Jinja2 SSTI on a virtual host gives RCE, audit logs leak credentials for a user in adm, and SplunkWhisperer2 escalates to root.
2025-12-22 11 min
[writeup]
Hack The Box Obscurity Writeup (Medium Linux)
Medium Linux box. A leaked SuperSecureServer.py runs the request path through exec(), a known plaintext attack recovers robert's key, and sudo gives root.
2025-12-22 4 min
[writeup]
Hack The Box Time Writeup (Medium Linux)
Medium Linux box. A jackson-databind validator falls to CVE-2019-12384 via an H2 RUNSCRIPT, and a root systemd timer runs a writable backup script.