2025-02-19 11 min
[writeup]
Hack The Box Heist Writeup (Easy Windows)
Easy Windows box. A guest login on the support portal leaks a Cisco IOS config, hashcat and type 7 decoding give Chase, and a Firefox dump gives admin.
tail -f /var/log/hos
retired boxes, exploit notes, tooling we wrote because nothing else did the job.
324
posts
11
authors
weekly
cadence
grep all HackTheBox OSCP Preparation Privilege Escalation Linux Web Windows RCE Easy Active Directory Information Disclosure SSH Medium
> latest
2025-01-10 14 min
[writeup]
Hack The Box Blackfield Writeup (Hard Windows)
Hard Windows AD box. SMB guest access lists the domain, an offline Kerberos crack gives support, an ACL resets audit2020, and an LSASS dump yields svc_backup.
2025-01-06 7 min
[writeup]
Hack The Box GoBox Writeup (Medium Linux)
Medium Linux box. Go template injection on the reset form leaks creds and runs commands, an S3 webshell gives www-data, and an nginx backdoor runs as root.
2024-12-31 6 min
[writeup]
Hack The Box LinkVortex Writeup (Easy Linux)
Easy Linux box. An exposed .git dump leaks the Ghost admin password, CVE-2023-40028 reads bob's SMTP creds, and a symlink sudo script leaks root's key.
2024-12-31 7 min
[writeup]
Hack The Box Administrator Writeup (Medium Windows)
Medium Windows AD box. GenericAll lets olivia reset michael, benjamin pulls a Password Safe vault off FTP, and a kerberoast on ethan ends in DCSync.