Nest @ HackTheBox

Book is a 30-point Linux machine on HackTheBox. We log into a web application by exploiting SQL truncation and then... read more

Writeup is a nice, medium difficulty machine on hackthebox, featuring the use of a publicly available sql injection exploit and... read more

We are solving Tenet, a 30-point machine HackTheBox that involves a simple PHP deserialization vulnerability, password reuse and a race... read more

Mango is a 30-point linux machine on hackthebox that involves a NoSQL-Injection which allows to obtain user passwords from a... read more

We are solving Cereal, a 40-point machine on HackTheBox. For user, we will exploit a pretty tricky deserialization vulnerability in... read more

We are solving Hutch from PG-Practice. For user, we will get credentials from LDAP & use them to upload a... read more

We are going to solve Laboratory, which is an easy linux machine on HackTheBox with a CVE on Gitlab for... read more

Acute is a 40-point Active Directory Windows machine on HackTheBox. I'm going to use it to show some techniques which... read more

Solving Academy on HackTheBox, a 20-point Linux machine on HackTheBox that involves a Laravel deserialization RCE, stored credentials & sudo... read more

RE is a 40 point windows machine on HackTheBox that involves uploading an ods file with a malicious macro, abusing... read more