2025-09-08 14 min
[writeup]
Hack The Box Titanic Writeup (Easy Linux)
Easy Linux box from Season 7. An LFI in a Flask booking app reads a Gitea SQLite database, and the hashes inside crack to an SSH login and then to root.
TH
tail -f /var/log/hos
retired boxes, exploit notes, tooling we wrote because nothing else did the job.
324
posts
11
authors
weekly
cadence
grep all HackTheBox OSCP Preparation Privilege Escalation Linux Web Windows RCE Easy Active Directory Information Disclosure SSH Medium
> latest
2025-08-29 12 min
[writeup]
Hack The Box Voleur Writeup (Medium Windows)
Medium Windows AD box. A cracked Excel file leaks passwords, targeted Kerberoasting lands WinRM, and a restored tombstone plus DPAPI leads to ntds.dit.
2025-08-15 3 min
[writeup]
HackingClub Squirrel Writeup (Medium Windows)
Medium Windows AD box. AS-REP roasting cracks svc_backup, Kerberoasting gives svc_web, an ACL chain reaches rachel.ops, and a keytab leaks the admin hash.
2025-07-15 9 min
[writeup]
Hack The Box Scrambled Writeup (Medium Windows)
Medium Windows AD box, Kerberos only. A password reset hint gives ksimpson, kerberoasting yields sqlsvc, and a silver ticket opens MSSQL as Administrator.
2025-07-08 13 min
[writeup]
Hack The Box Rebound Writeup
Insane Windows AD box. SMB RID-bruting leads to AS-REP roasting and Kerberoasting, then shadow credentials, a RemotePotato relay and RBCD take the domain.