2024-11-04 11 min
[writeup]
Hack The Box Sightless Writeup (Easy Linux)
Easy Linux box. SQLPad CVE-2022-0944 template injection gives a container root shell, /etc/shadow hashes crack to michael, and Froxlor PHP-FPM runs as root.
tail -f /var/log/hos
retired boxes, exploit notes, tooling we wrote because nothing else did the job.
324
posts
11
authors
weekly
cadence
grep all HackTheBox OSCP Preparation Privilege Escalation Linux Web Windows RCE Easy Active Directory Information Disclosure SSH Medium
> latest
2024-10-30 13 min
[writeup]
Hack The Box GreenHorn Writeup (Easy Linux)
Easy Linux box. A public Gitea repo leaks the Pluck CMS password hash, CVE-2023-50564 gives RCE, and Depix recovers the root password from a pixelated PDF.
2024-10-29 16 min
[writeup]
Hack The Box Chemistry Writeup (Easy Linux)
Easy Linux box. A crafted CIF file fires CVE-2024-23346 in pymatgen, cracked MD5 hashes hand over rosa, and CVE-2024-23334 in aiohttp reads root's SSH key.
2024-10-28 12 min
[writeup]
Hack The Box Cicada Writeup (Easy Windows)
Easy Windows AD box. An SMB share leaks the new hire default password, a user description hides another, and Backup Operators dumps SAM for the admin hash.
2024-06-05 8 min
[writeup]
Hack The Box Freelancer Writeup (Hard Windows)
Hard Windows box. An IDOR in the QR login takes over admin, the SQL terminal runs xp_cmdshell as sa, and a setup INI leaks a password reused elsewhere.