Command Injection & Path Hijacking – Previse @ HackTheBox

Resolute is a 30-point Windows machine on HackTheBox that involves enumerating LDAP, Password Spraying, and using the DNSAdmins group... read more

We are going to solve Tentacle, a 40-point machine on HackTheBox which involves a bit of Squid Proxy Magic... read more

We are solving Pivotapi, a 50-point Windows machine on HackTheBox. This one involves some Reverse Engineering, MSSQL, and Active... read more

Json is a 30-point system on HackTheBox that involves exploiting a .NET deserialization vulnerability and has multiple ways for... read more

Registry is a 40-point machine on HackTheBox that involves interacting with a docker registry to download a docker image... read more

APT is a 50-point machine on HackTheBox which involves getting the IPv6 Address via MS-RPC, credential spraying, and reading... read more

Player2 is a 50-point Linux machine on HackTheBox. For user we do some web fuzzing, call a twirp method... read more

RE is a 40 point windows machine on HackTheBox that involves uploading an ods file with a malicious macro,... read more

Helpline is a really fun box on hackthebox.eu, which I was lucky enough to get system first blood on... read more

Safe is an "easy" machine on hackthebox, involving a simple buffer overflow and cracking a keepass file. read more