2025-12-10 7 min
[writeup]
Hack The Box Toolbox Writeup (Easy Windows)
Easy Windows box. SQL injection on the admin login yields a shell in a boot2docker container, and the default docker:tcuser SSH login reaches the host C drive.
tail -f /var/log/hos
retired boxes, exploit notes, tooling we wrote because nothing else did the job.
324
posts
11
authors
weekly
cadence
grep all HackTheBox OSCP Preparation Privilege Escalation Linux Web Windows RCE Easy Active Directory Information Disclosure SSH Medium
> latest
2025-12-08 16 min
[writeup]
Hack The Box Gavel Writeup (Medium Linux)
Medium Linux box. An exposed .git leaks a PDO backtick SQL injection, an admin bid rule runs PHP for a shell, and a YAML sandbox rewrite SUIDs bash.
2025-12-06 8 min
[writeup]
Hack The Box Ransom Writeup (Medium Linux)
Medium Linux box. A JSON body of password true bypasses the API login, bkcrack breaks a ZipCrypto archive for an SSH key, and the source leaks root's password.
2025-12-05 14 min
[writeup]
Hack The Box Bounty Writeup (Easy Windows)
Easy Windows box. IIS shortname enumeration finds transfer.aspx, a web.config upload runs a PowerShell reverse shell, and MS16-075 Juicy Potato gives SYSTEM.
2025-12-05 16 min
[writeup]
Hack The Box Love Writeup (Easy Windows)
Easy Windows box. sqlmap on the admin login form yields OS command execution as phoebe, creds sit in conn.php, and AlwaysInstallElevated gives SYSTEM.