Crossfit @ HackTheBox

Heist is an "easy" machine on hackthebox, involving some enumeration (especially rpc) and some forensics (dumping firefox memory). read more

Time is a 30-point machine on HackTheBox that involves using a public exploit for a CVE and overwriting a shell... read more

This is a short writeup on the "NonHeavyFTP" challenge from Real World CTF 2023. This was one of the easier... read more

In this video, we are going to solve Jellyfish, a medium difficulty box from TryHackMe, which involves exploiting a PHP... read more

Arkham was a surprisingly hard box for the 30 points that were awarded for it, as I was struggling quite... read more

APT is a 50-point machine on HackTheBox which involves getting the IPv6 Address via MS-RPC, credential spraying, and reading the... read more

OpenAdmin is a 20-Point Linux machine on HackTheBox that involves using a public exploit for OpenNetAdmin & abusing a sudo... read more

Ghoul is a nice 40 points machine on hackthebox involving zip traversal, lateral movement, public exploits and some obscure hidden... read more

Patents is a 40-point Linux machine on HackTheBox. For user we exploit an external entity injection in a word document... read more

We are going to solve Bucket, a medium Linux machine on HackTheBox. We get credentials from DynamoDB, upload a webshell... read more