2025-06-06 11 min
[writeup]
Hack The Box Planning Writeup (Easy Linux)
Easy Linux box. CVE-2024-9264 in Grafana gives a container shell, env vars leak enzo's SSH password, and a root cron manager on port 8000 runs a reverse shell.
tail -f /var/log/hos
retired boxes, exploit notes, tooling we wrote because nothing else did the job.
324
posts
11
authors
weekly
cadence
grep all HackTheBox OSCP Preparation Privilege Escalation Linux Web Windows RCE Easy Active Directory Information Disclosure SSH Medium
> latest
2025-06-04 9 min
[writeup]
Hack The Box Haze Writeup (Hard Windows)
Hard Windows AD box. CVE-2024-36991 leaks splunk.secret, a gMSA and shadow credentials chain reaches edward.martin, and a Splunk app payload lands SYSTEM.
2025-06-04 15 min
[writeup]
Hack The Box Fluffy Writeup (Easy Windows)
Easy Windows AD box. CVE-2025-24071 in a writable share captures p.agila's Net-NTLMv2 hash, and GenericWrite plus ADCS ESC16 yields the Administrator hash.
2025-06-01 14 min
[writeup]
Hack The Box Flight Writeup
Hard Windows AD box. An LFI triggers SMB hash capture via LLMNR poisoning, then unconstrained delegation and PrinterBug steal the DC's TGT for DCSync.
2025-05-24 9 min
[writeup]
Hack The Box Puppy Writeup
Medium Windows AD box. BloodHound finds GenericAll over a group, self-addition opens a KeePass database in SMB, and DPAPI secrets recover admin credentials.