XSS, Deserialization & SeImpersonate – Cereal @ HackTheBox

Curling is one of the easier boxes on hackthebox.eu, featuring getting a shell on joomla via template editing, getting... read more

We are solving intelligence, a nice windows machine on HackTheBox, created by Micah. For user, we will enumerate pdfs... read more

Helpline is a really fun box on hackthebox.eu, which I was lucky enough to get system first blood on... read more

Ghoul is a nice 40 points machine on hackthebox involving zip traversal, lateral movement, public exploits and some obscure... read more

Json is a 30-point system on HackTheBox that involves exploiting a .NET deserialization vulnerability and has multiple ways for... read more

We are solving UT99, an intermediate windows box on PG Practice. On this box, we are going to exploit... read more

We are solving Proper, a 40-point Windows machine on HackTheBox created by jkr and me. This box involves a... read more

Solving Passage on HackTheBox. This is an easy box involving 2 public exploits, one for the CuteNews CMS and... read more

Ellingson is fun and quick 40 points machine on hackthebox, featuring the abuse of the python/flask werkzeug debugger, cracking... read more

Redcross is a machine on hackthebox.eu, featuring sql injection, cookie reuse and a nice binary exploitation challenge, which I... read more