Command Injection & Path Hijacking – Previse @ HackTheBox

Bankrobber is a 50-point machine on hackthebox that involves exploiting a cross site scripting vulnerability to gain access to an... read more

Safe is an "easy" machine on hackthebox, involving a simple buffer overflow and cracking a keepass file. read more

Helpline is a really fun box on hackthebox.eu, which I was lucky enough to get system first blood on :)... read more

We are solving Tenet, a 30-point machine HackTheBox that involves a simple PHP deserialization vulnerability, password reuse and a race... read more

OpenAdmin is a 20-Point Linux machine on HackTheBox that involves using a public exploit for OpenNetAdmin & abusing a sudo... read more

Player2 is a 50-point Linux machine on HackTheBox. For user we do some web fuzzing, call a twirp method to... read more

We are solving intelligence, a nice windows machine on HackTheBox, created by Micah. For user, we will enumerate pdfs on... read more

This is a short walkthrough on Lustrous, a chain consisting of 2 machines on vulnlab. read more

Control is a 40-point windows machine on hackthebox that involves a sql injection which we use to upload a webshell.... read more

Sauna is a 20-point Windows Machine on HackTheBox. For user, we bruteforce usernames and then use ASREP-Roasting to obtain the... read more