XSS, Deserialization & SeImpersonate – Cereal @ HackTheBox

APT is a 50-point machine on HackTheBox which involves getting the IPv6 Address via MS-RPC, credential spraying, and reading... read more

There is no excerpt because this is a protected post. read more

Traverxec is a 20-point machine on hackthebox that involves using a public exploit on the nostromo webserver, cracking the... read more

P.O.O. Endgame is one of HackTheBox’s endgame labs and was just retired. It involves exploiting SQL Server Links &... read more

Monteverde is a 30-point Windows machine on HackTheBox that involves some LDAP and SMB enumeration to get the user... read more

We are going to solve Atom, a 30-point machine on HackTheBox where we'll analyze an electron app and exploit... read more

Solving Passage on HackTheBox. This is an easy box involving 2 public exploits, one for the CuteNews CMS and... read more

Writeup is a nice, medium difficulty machine on hackthebox, featuring the use of a publicly available sql injection exploit... read more

Haystack is a 20 points machine on hackthebox, which in my opinion is not as easy as one might... read more

Helpline is a really fun box on hackthebox.eu, which I was lucky enough to get system first blood on... read more