JWT & Docker CVE – TheNotebook @ HackTheBox

Ghoul is a nice 40 points machine on hackthebox involving zip traversal, lateral movement, public exploits and some obscure... read more

Traverxec is a 20-point machine on hackthebox that involves using a public exploit on the nostromo webserver, cracking the... read more

We are solving Kevin, an easy-rated Windows machine on PG Practice that involves a SEH Based Buffer Overflow. read more

We are solving Cereal, a 40-point machine on HackTheBox. For user, we will exploit a pretty tricky deserialization vulnerability... read more

There is no excerpt because this is a protected post. read more

In this post I will give a quick walkthrough on Giddy from hackthebox.eu. The machine involves (automated) sql injection,... read more

We are solving Tenet, a 30-point machine HackTheBox that involves a simple PHP deserialization vulnerability, password reuse and a... read more

We are solving Proper, a 40-point Windows machine on HackTheBox created by jkr and me. This box involves a... read more

AuthBy is a medium difficulty Windows machine on PG Practice. It involves getting FTP access to the web root... read more

We are going to solve Ophiuchi a 30-point machine on HackTheBox that involves a YAML parser vulnerability and a... read more