2025-10-27 5 min
[writeup]
Hack The Box Bank Writeup (Easy Linux)
Easy Linux box. A DNS zone transfer confirms bank.htb, a 302 that still returns support.php leads to a .htb file upload, and a setuid binary gives root.
tail -f /var/log/hos
retired boxes, exploit notes, tooling we wrote because nothing else did the job.
324
posts
11
authors
weekly
cadence
grep all HackTheBox OSCP Preparation Privilege Escalation Linux Web Windows RCE Easy Active Directory Information Disclosure SSH Medium
> latest
2025-10-24 38 min
[writeup]
Hack The Box Bruno Writeup (Medium Windows)
Medium Windows AD box. Anonymous FTP leaks a service account, AS-REP roasting cracks it, a Zip Slip DLL hijack lands a shell, and KrbRelayUp gives SYSTEM.
2025-10-23 6 min
[writeup]
Hack The Box Arctic Writeup (Easy Windows)
Easy Windows box. ColdFusion 8 on port 8500 leaks files and an FCKeditor upload lands a shell as tolis, then unpatched Server 2008 falls to MS10-092.
2025-10-22 4 min
[writeup]
Hack The Box Mirai Writeup (Easy Linux)
Easy Linux box. A Raspberry Pi running Pi-hole keeps the default pi and raspberry login, sudo is unrestricted, and root.txt comes back out of /dev/sdb.
2025-10-22 5 min
[writeup]
Hack The Box Photobomb Writeup (Easy Linux)
Easy Linux box. Credentials sit in a JavaScript file, the filetype parameter of the printer endpoint injects commands, and a sudo script with SETENV gives root.