2025-12-17 14 min
[writeup]
Hack The Box Networked Writeup (Easy Linux)
Easy Linux box. A .php.gif double extension upload gives apache, a filename command injection in guly's cron lands user, and sudo ifup sources a root shell.
tail -f /var/log/hos
retired boxes, exploit notes, tooling we wrote because nothing else did the job.
324
posts
11
authors
weekly
cadence
grep all HackTheBox OSCP Preparation Privilege Escalation Linux Web Windows RCE Easy Active Directory Information Disclosure SSH Medium
> latest
2025-12-17 7 min
[writeup]
Hack The Box Monteverde Writeup
Medium Windows AD box. LDAP null-bind and a username-as-password spray get SMB access, and an Azure AD Connect config leaks the domain admin password.
2025-12-17 9 min
[writeup]
Hack The Box Resolute Writeup (Medium Windows)
Medium Windows AD box. A null session reads marko's description for a default password, melanie sprays into WinRM, and DNSAdmins loads a DLL as SYSTEM.
2025-12-17 7 min
[writeup]
Hack The Box Shoppy Writeup (Easy Linux)
Easy Linux box. A NoSQL injection dumps the admin hashes, a private Mattermost channel leaks jaeger's SSH password, and the docker group turns deploy into root.
2025-12-17 13 min
[research]
CVE-2025-66224: escrita de arquivo no OrangeHRM (PoC)
PoC da CVE-2025-66224: entrada não higienizada no fluxo de e-mail do OrangeHRM 5.0 a 5.7 chega ao comando sendmail e permite escrever arquivos no servidor.