Crossfit @ HackTheBox

Solving Luanne on HackTheBox. This is an easy 20-point machine involving a simple command injection and some password cracking. read more

Ypuffy is a rather unique machine on hackthebox.eu because it features OpenBSD as operating system. In my version of getting... read more

AuthBy is a medium difficulty Windows machine on PG Practice. It involves getting FTP access to the web root of... read more

Nest is a 20-point Windows machine on HackTheBox that involves searching through smb shares and analyzing 2 short custom programs. read more

We are going to solve Delivery, a 20-point machine on HackTheBox. For user, we will bypass email verification on a... read more

Json is a 30-point system on HackTheBox that involves exploiting a .NET deserialization vulnerability and has multiple ways for privilege... read more

Control is a 40-point windows machine on hackthebox that involves a sql injection which we use to upload a webshell.... read more

Onetwoseven is a great machine on hackthebox, featuring symbolic links, port forwarding through sftp and some typical web application exploitation.... read more

We are solving Proper, a 40-point Windows machine on HackTheBox created by jkr and me. This box involves a custom... read more

This is a short writeup on the "NonHeavyFTP" challenge from Real World CTF 2023. This was one of the easier... read more