XSS, Deserialization & SeImpersonate – Cereal @ HackTheBox

Player2 is a 50-point Linux machine on HackTheBox. For user we do some web fuzzing, call a twirp method to... read more

Helpline is a really fun box on hackthebox.eu, which I was lucky enough to get system first blood on :)... read more

This short write-up is about Irked, a rather easy machine on hackthebox featuring an irc backdoor, some steganography and a... read more

Buff is a 20-point Windows Machine on HackTheBox, created by egotisticalSW. It involves 2 simple public exploits and forwarding a... read more

We are solving Dynstr, a 30-point Linux machine on HackTheBox that involves a Dynamic DNS Service & a Command Injection. read more

We are solving Proper, a 40-point Windows machine on HackTheBox created by jkr and me. This box involves a custom... read more

We are solving Hutch from PG-Practice. For user, we will get credentials from LDAP & use them to upload a... read more

Registry is a 40-point machine on HackTheBox that involves interacting with a docker registry to download a docker image and... read more

Writeup is a nice, medium difficulty machine on hackthebox, featuring the use of a publicly available sql injection exploit and... read more

Mango is a 30-point linux machine on hackthebox that involves a NoSQL-Injection which allows to obtain user passwords from a... read more