2025-11-27 4 min
[writeup]
Hack The Box Tabby Writeup (Easy Linux)
Easy Linux box. An LFI in news.php reads tomcat-users.xml, a WAR deploy gives a shell, a cracked zip password reuses as ash, and the lxd group mounts the host.
tail -f /var/log/hos
retired boxes, exploit notes, tooling we wrote because nothing else did the job.
324
posts
11
authors
weekly
cadence
grep all HackTheBox OSCP Preparation Privilege Escalation Linux Web Windows RCE Easy Active Directory Information Disclosure SSH Medium
> latest
2025-11-26 9 min
[writeup]
Hack The Box Passage Writeup (Medium Linux)
Medium Linux box. CuteNews leaks its user hashes and takes a PHP avatar webshell, a shared SSH key reaches nadav, and USBCreator overwrites /etc/sudoers.
2025-11-24 13 min
[writeup]
Hack The Box Ten Writeup (Hard Linux)
Hard Linux box. WebDB guesses the PureFTPd database password, editing the FTP user row plants an SSH key for tyrell, and etcd vhost injection returns root.
2025-11-23 6 min
[writeup]
Hack The Box Redelegate Writeup
Hard Windows AD box. A cracked KeePassXC database yields MSSQL credentials, then a constrained delegation chain and SeEnableDelegationPrivilege reach DCSync.
2025-11-21 9 min
[research]
CVE-2025-63406: RCE no Group Office via eval() (PoC)
PoC da CVE-2025-63406: execução remota de código no Group Office groupware via dbToApi() e eval() em FunctionField.php, antes das versões 25.0.47 e 6.8.136.