--- title: "amin Ouji (@amin182) | Hashnode" description: "Noting. Read the latest articles by amin Ouji on Hashnode." url: "https://hashnode.com/@amin182" --- @amin182 # amin Ouji @amin182 · Joined October 2023 Noting ### [HackTheBox | Active - Active Directory Kerberoasting Attack"](https://hunteramine.hashnode.dev/hackthebox-active?utm_source=hashnode&utm_medium=feed) \## Executive Summary Active is an Active Directory machine that introduces core AD attack techniques including SMB enumeration, GPP password retrieval, and Kerberoasting for privilege escalation. ## Reconnaissance ### Nmap Scan \`\`\`bash sudo nmap ... 2 min read · [hunteramine.hashnode.dev](https://hunteramine.hashnode.dev/hackthebox-active?utm_source=hashnode&utm_medium=feed) [Sep 28, 2025](https://hashnode.com/posts/hackthebox-active/68d947e3ad0c0d841c210b93) ### [HackTheBox | Poison - FreeBSD Privilege Escalation via VNC](https://hunteramine.hashnode.dev/hackthebox-poison-freebsd?utm_source=hashnode&utm_medium=feed) Poison is an easy FreeBSD machine that introduces attackers to BSD systems and demonstrates privilege escalation through VNC service exploitation. The attack path involves PHP file inclusion, credential decoding, and VNC port forwarding. ## Reconnai... 2 min read · [hunteramine.hashnode.dev](https://hunteramine.hashnode.dev/hackthebox-poison-freebsd?utm_source=hashnode&utm_medium=feed) [Sep 28, 2025](https://hashnode.com/posts/hackthebox-poison-freebsd/68d944c4ffc1a8bf720687be) ### [FriendZone - Complete Walkthrough (OSCP preper)](https://hunteramine.hashnode.dev/friendzone?utm_source=hashnode&utm_medium=feed) nmap Scan : # Nmap 7.94SVN scan initiated Wed Feb 21 18:25:26 2024 as: nmap -Pn -p- --min-rate 2000 -A -oN nmap.txt 10.10.10.123 Nmap scan report for 10.10.10.123 Host is up (0.011s latency). Not shown: 65528 closed tcp ports (reset) PORT STATE SE... 4 min read · [hunteramine.hashnode.dev](https://hunteramine.hashnode.dev/friendzone?utm_source=hashnode&utm_medium=feed) [Sep 28, 2025](https://hashnode.com/posts/friendzone/68d93e4bb866912a21c285d4) ### [Bashed - Complete Walkthrough (OSCP Peper)](https://hunteramine.hashnode.dev/bashed?utm_source=hashnode&utm_medium=feed) \## Executive Summary Bashed is an easy Linux machine that demonstrates the dangers of exposed development environments and misconfigured sudo privileges. The attack path involves discovering a public PHP web shell, gaining initial access, and escala... 2 min read · [hunteramine.hashnode.dev](https://hunteramine.hashnode.dev/bashed?utm_source=hashnode&utm_medium=feed) [Sep 28, 2025](https://hashnode.com/posts/bashed/68d93a9a95cdd8343ad9ffe8) ### [HTB Jerry Writeup (OSCP Preper)](https://hunteramine.hashnode.dev/htb-jerry-writeup-oscp-preper?utm_source=hashnode&utm_medium=feed) Executive Summary The "Jerry" machine is a straightforward Windows box that highlights the dangers of using default or weak credentials on internet-facing services. The path to compromise involves discovering an exposed Apache Tomcat Manager instance... 3 min read · [hunteramine.hashnode.dev](https://hunteramine.hashnode.dev/htb-jerry-writeup-oscp-preper?utm_source=hashnode&utm_medium=feed) [Sep 25, 2025](https://hashnode.com/posts/htb-jerry-writeup-oscp-preper/68d5959208fb6b4e45993464)