2024-02-05 3 min
[writeup]
Hack The Box Popcorn Writeup (Medium Linux)
Medium Linux box. SQL injection bypasses the torrent host login, a PHP shell uploaded as a torrent screenshot gives a foothold, and Dirty COW gives root.
tail -f /var/log/hos
retired boxes, exploit notes, tooling we wrote because nothing else did the job.
324
posts
11
authors
weekly
cadence
grep all HackTheBox OSCP Preparation Privilege Escalation Linux Web Windows RCE Easy Active Directory Information Disclosure SSH Medium
> latest
2024-02-05 7 min
[writeup]
Hack The Box SolidState Writeup (Medium Linux)
Medium Linux box. Default root:root on James 2.3.2 resets mailbox passwords, an email leaks mindy's SSH login, and a world-writable /opt/tmp.py runs as root.
2024-02-05 6 min
[writeup]
Hack The Box Poison Writeup (Medium FreeBSD)
Medium FreeBSD box. An LFI in browse.php exposes pwdbackup.txt, whose repeatedly base64 encoded password logs in as charix, and a stored VNC password is root.
2024-02-05 5 min
[writeup]
Hack The Box Optimum Writeup (Easy Windows)
Easy Windows box. HttpFileServer 2.3 on port 80 falls to CVE-2014-6287 for a shell as kostas, and MS16-032 escalates that session to SYSTEM.
2024-02-05 17 min
[writeup]
Hack The Box Falafel Writeup (Hard Linux)
Hard Linux box. SQLi dumps the users table, a PHP type juggling collision logs in as admin, a truncated filename uploads a shell, and disk group reads root.