2024-02-02 8 min
[writeup]
Hack The Box Gofer Writeup (Hard Linux)
Hard Linux box. An open SMB share leaks a mail backup, a gopher SSRF sends a phishing mail carrying a macro ODT, and a setuid notes binary hijacks tar.
tail -f /var/log/hos
retired boxes, exploit notes, tooling we wrote because nothing else did the job.
324
posts
11
authors
weekly
cadence
grep all HackTheBox OSCP Preparation Privilege Escalation Linux Web Windows RCE Easy Active Directory Information Disclosure SSH Medium
> latest
2024-02-02 9 min
[writeup]
Hack The Box Snoopy Writeup (Hard Linux)
Hard Linux box. An LFI leaks the BIND TSIG key, nsupdate hijacks the Mattermost reset mail, and sudo git apply writes sbrown's authorized_keys.
2024-02-02 8 min
[writeup]
Hack The Box Cronos Writeup (Medium Linux)
Medium Linux box. A DNS zone transfer finds admin.cronos.htb, SQLi bypasses the login, a ping panel injects commands, and a root cron runs Laravel artisan.
2024-02-02 6 min
[writeup]
Hack The Box Joker Writeup (Hard Linux)
Hard Linux box. TFTP hands over the squid config and password file, a Werkzeug console behind the proxy gives a UDP shell, and a tar wildcard cron gives root.
2024-02-02 7 min
[writeup]
Hack The Box Clicker Writeup (Medium Linux)
Medium Linux box. An NFS backup leaks the source, a role parameter trick grants admin, a PHP nickname export gives RCE, and PERL5OPT through sudo gives root.