2024-01-25 5 min
[writeup]
Hack The Box Sandworm Writeup (Medium Linux)
Medium Linux box. Jinja2 SSTI in the PGP signature form gives a shell, httpie session files leak silentobserver, and a SUID firejail binary gives root.
tail -f /var/log/hos
retired boxes, exploit notes, tooling we wrote because nothing else did the job.
324
posts
11
authors
weekly
cadence
grep all HackTheBox OSCP Preparation Privilege Escalation Linux Web Windows RCE Easy Active Directory Information Disclosure SSH Medium
> latest
2024-01-25 3 min
[writeup]
Hack The Box Manager Writeup (Easy Windows)
Easy Windows AD box. A RID brute finds operator using its own name as a password, MSSQL xp_dirtree leaks a web backup, and ESC7 mints the Administrator.
2024-01-25 5 min
[writeup]
EternalBlue MS17-010 SMB Exploitation Walkthrough
Windows target on the lab range with only SMB and RPC exposed. An nmap vuln scan flags MS17-010, and the Metasploit eternalblue module returns a SYSTEM shell.
2024-01-25 5 min
[writeup]
Hack The Box CozyHosting Writeup (Easy Linux)
Easy Linux box. A Spring Boot actuator leaks a session cookie, the scanner injects commands, a decompiled jar gives postgres, and sudo ssh gives root.
2024-01-25 3 min
[writeup]
TryHackMe Biohazard Writeup (Resident Evil Room)
Every flag in the mansion, from the dining room emblem to the four encoded crests that hide the FTP login, then umbrella_guest over SSH and root as weasker.