Exploiting Gitlab 12.8.1 – Laboratory @ HackTheBox
We are going to solve Laboratory, which is an easy linux machine on HackTheBox with a CVE on Gitlab for user and path hijacking on a setuid binary for root.
We are going to solve Laboratory, which is an easy linux machine on HackTheBox with a CVE on Gitlab for user and path hijacking on a setuid binary for root.
Fortune is a 50 point machine on hackthebox.eu featuring OpenBSD. I was lucky enough to get first blood on... read more
In this short writeup I will show how I completed Access on hackthebox.eu, a quite easy windows box that... read more
AuthBy is a medium difficulty Windows machine on PG Practice. It involves getting FTP access to the web root... read more
Frolic is a medium difficulty machine on hackthebox.eu, featuring a lot of CTF-ish language conversions, the usage of a... read more
There is no excerpt because this is a protected post. read more
We are solving UT99, an intermediate windows box on PG Practice. On this box, we are going to exploit... read more
Sauna is a 20-point Windows Machine on HackTheBox. For user, we bruteforce usernames and then use ASREP-Roasting to obtain... read more
Bankrobber is a 50-point machine on hackthebox that involves exploiting a cross site scripting vulnerability to gain access to... read more
Registry is a 40-point machine on HackTheBox that involves interacting with a docker registry to download a docker image... read more
We are solving Hutch from PG-Practice. For user, we will get credentials from LDAP & use them to upload... read more