2024-02-05 7 min
[writeup]
Hack The Box Blocky Writeup (Easy Linux)
Easy Linux box. A Minecraft plugin jar under /plugins hardcodes the MySQL root password, notch reuses it over SSH, and unrestricted sudo gives root.
tail -f /var/log/hos
retired boxes, exploit notes, tooling we wrote because nothing else did the job.
324
posts
11
authors
weekly
cadence
grep all HackTheBox OSCP Preparation Privilege Escalation Linux Web Windows RCE Easy Active Directory Information Disclosure SSH Medium
> latest
2024-02-05 4 min
[writeup]
Hack The Box Netmon Writeup (Easy Windows)
Easy Windows box. Anonymous FTP serves the whole C drive, a PRTG configuration backup leaks the admin password, and a PRTG 18.1.37 RCE creates a local admin.
2024-02-05 9 min
[writeup]
TryHackMe Advent of Cyber 2023 Side Quest 1 Writeup
TryHackMe side quest on a PCAP. Crack the WPA handshake with aircrack-ng, decrypt the traffic, find mimikatz over WinRM, and replay RDP with pyrdp.
2024-02-05 7 min
[notes]
JexBoss: JBoss and Java Deserialization Exploit Tool
JexBoss tests and exploits JBoss and Java deserialization flaws. Install it, scan a network, and get a reverse shell through jmx-console, Invoker or Struts2.
2024-02-02 7 min
[writeup]
Hack The Box Haircut Writeup (Medium Linux)
Medium Linux box. exposed.php passes user input into curl, which uploads a PHP shell to /uploads for www-data, and SUID screen 4.5.0 (CVE-2017-5618) gives root.