PHP Unserialize & Race Condition – Tenet @ HackTheBox

Player is a hard box, that we solved in unintended ways that are partly patched now. read more

ForwardSlash is a 40-point Linux Machine on HackTheBox. We use a path traversal vulnerability to get ssh credentials and... read more

We will solve Sharp, a 40-point machine on HackTheBox that is all about C-Sharp & .Net. For user, we... read more

Ghoul is a nice 40 points machine on hackthebox involving zip traversal, lateral movement, public exploits and some obscure... read more

In this short writeup I will show how I completed Access on hackthebox.eu, a quite easy windows box that... read more

Forest is a 20-point active directory machine on HackTheBox that involves user enumeration, AS-REP-Roasting and abusing Active Directory ACLs... read more

We are going to solve Delivery, a 20-point machine on HackTheBox. For user, we will bypass email verification on... read more

Carrier is a nice, medium difficulty machine on hackthebox.eu featuring information retrieval via snmp, command injection and bgp hijacking.... read more

Solving Luanne on HackTheBox. This is an easy 20-point machine involving a simple command injection and some password cracking. read more

SwagShop is a very easy machine on hackthebox, involving a public exploit and sudo abuse. read more