2025-10-20 3 min
[writeup]
Hack The Box Keeper Writeup (Easy Linux)
Easy Linux box. Request Tracker keeps its default root login, a user comment leaks an SSH password, and CVE-2023-32784 pulls a KeePass key out of a crash dump.
tail -f /var/log/hos
retired boxes, exploit notes, tooling we wrote because nothing else did the job.
324
posts
11
authors
weekly
cadence
grep all HackTheBox OSCP Preparation Privilege Escalation Linux Web Windows RCE Easy Active Directory Information Disclosure SSH Medium
> latest
2025-10-17 7 min
[writeup]
Hack The Box Sweep Writeup (Medium Windows)
Medium Windows AD box. intern:intern opens Lansweeper, an SSH honeypot harvests a scanning credential, and GenericAll plus LansweeperDecrypt reach SYSTEM.
2025-10-14 4 min
[writeup]
Hack The Box Pandora Writeup (Easy Linux)
Easy Linux box. SNMP leaks daniel's SSH password, an unauthenticated Pandora FMS SQLi gives matt, and a relative-path tar in a SUID binary gives root.
2025-10-14 9 min
[writeup]
Hack The Box Soccer Writeup (Easy Linux)
Easy Linux box. Default Tiny File Manager creds upload a PHP shell, blind SQL injection over websockets dumps player's password, and doas dstat gives root.
2025-10-13 6 min
[writeup]
Hack The Box Help Writeup (Easy Linux)
Easy Linux box. HelpDeskZ stores a PHP shell even while rejecting it, its config leaks the MySQL root password, and CVE-2017-16995 gives root.