2024-01-25 4 min
[writeup]
TryHackMe Jeff Writeup (Hard Linux)
Hard room. A cracked backup.zip leaks the WordPress password, a vulnerable plugin gives a shell inside Docker, and a tar wildcard over FTP escapes to the host.
tail -f /var/log/hos
retired boxes, exploit notes, tooling we wrote because nothing else did the job.
324
posts
11
authors
weekly
cadence
grep all HackTheBox OSCP Preparation Privilege Escalation Linux Web Windows RCE Easy Active Directory Information Disclosure SSH Medium
> latest
2024-01-25 4 min
[notes]
Mimikatz Cheat Sheet and Build Guide
Reference notes for mimikatz: the sekurlsa, kerberos, crypto, vault and lsadump command groups, plus how to build the solution from source in Visual Studio.
2024-01-25 3 min
[writeup]
TryHackMe Ra Writeup
Windows AD room. A password reset answer is guessable from an image filename, a Spark chat XSS leaks an NTLM hash, and a cron script runs Invoke-Expression.
2024-01-25 6 min
[writeup]
TryHackMe Holo Network Writeup (Active Directory)
Red team lab. An LFI on dev.holo.live leaks creds, RCE lands in a container, a MySQL OUTFILE webshell breaks out, and SUID docker gives root.