Tiziano Massalertamalware.hashnode.dev·Nov 12, 2024Hack the Box — Sherlock Brutus - SoluciónBienvenidos a una nueva resolución de un sherlock en la plataforma de Hack the Box. Para quienes no conozcan, podríamos mencionar que los sherlock son una especie de “CTF” pero para el ámbito de Blue Team, donde HTB ofrece diversas opciones como anál...Discuss#HackTheBox
jamarirjamarir.hashnode.dev·Nov 10, 2024[HackTheBox] SaunaJust another ASREPRoast / WinRM / Autologon / NTDS.dit / NC / Replication Topology / PsExec / SAM LM:NT / DCSync Write-up. You may register the Microsoft Learn (with Windows filter) documentation bookmark for reference :) There might be some discrep...Discuss·1 like·133 readsActive Directory / WindowsCTF
jamarirjamarir.hashnode.dev·Nov 4, 2024[HackTheBox] ActiveJust another GPP / BloodHound / Kerberos / Kerberoast / KADM Write-up. You may register the Microsoft Learn (with Windows filter) documentation bookmark for reference :) Crackmapexec is now archived and no longer maintained (due to the existence of ...Discuss·3 likes·153 readsActive Directory / WindowsCTF
Ron Twisttwisted007.com·Nov 2, 2024HackTheBox: PermXIntroduction PermX is a cool Easy level machine from HackTheBox. Key points include fingerprinting the website framework in use, identifying an applicable RCE exploit, moving laterally to a user level, then escalating to root by abusing the user’s su...DiscussHackTheBox Writeups#HackTheBox
jamarirjamarir.hashnode.dev·Nov 2, 2024[HackTheBox] PermXJust another WebShell / Sudo abuse Write-up. As a side-node, as this Hack The Box blog states: It is Okay to Use Writeups. The more time you spend after getting the root flag on the box, the more you’ll learn. Link: https://app.hackthebox.com/machin...Discuss·2 likes·79 readsMisc CTFCTF
nocnoc.hashnode.dev·Nov 2, 2024HackTheBox - Brutus (Sherlock)“En este Sherlock, te familiarizarás con los archivos de registro auth.log y wtmp de Unix. Se explorará un escenario en el que un servidor de Confluence fue vulnerado mediante un ataque de fuerza bruta a través del servicio SSH. Después de acceder al...Discuss#HackTheBox
Tiziano Massalertamalware.hashnode.dev·Sep 11, 2024Hack the Box - Máquina Fawn - SoluciónBienvenidos a una nueva resolución de una máquina vulnerable en la plataforma de Hack the Box. Fawn es una máquina de dificultad muy fácil ubicada en el Tier 0 del Starting Point de Hack the Box. Como siempre, nuestro objetivo es apoderarnos del arch...Discuss#HackTheBox
William MaforWilliam Ma's security blogwillsec.hashnode.dev·Sep 6, 2024HTB Notes: ArchetypeSMB Scanning the machine we find the following services running: SMB (445) SQL Server (1433) We can list the shares or services by using the following command. smbclient -L //10.129.227.227 --user=Administator This works because the SMB server is...Discuss#cybersecurity
William MaforWilliam Ma's security blogwillsec.hashnode.dev·Sep 6, 2024HTB Notes: FunnelFTP We begin by scanning the box with nmap. We find two ports open on the machine: 21 (ftp) and 22 (ssh) We can access the ftp server using the anonymous user account. An interesting note is we could use either the anonymous or ftp user and we co...Discuss·29 reads#HackTheBox
Tiziano Massalertamalware.hashnode.dev·Aug 30, 2024Hack the Box — Máquina Meow — SoluciónBienvenidos a mi primer write-up hablando de cómo vulnerar una máquina vía penetration testing. En este caso, les estaré compartiendo la solución en español de la máquina Meow, disponible en la plataforma de Hack The Box en el Starting Point de forma...Discuss#cybersecurity
![[HackTheBox] Sauna](https://cdn.hashnode.com/res/hashnode/image/upload/v1730414943053/2ca1f1be-4e7e-484e-8d24-6305e405b6f7.png?w=1600&h=840&fit=crop&crop=entropy&auto=compress,format&format=webp)
![[HackTheBox] Active](https://cdn.hashnode.com/res/hashnode/image/upload/v1730326306697/1b357f81-4196-4227-a247-8787e5f22414.png?w=1600&h=840&fit=crop&crop=entropy&auto=compress,format&format=webp)
![[HackTheBox] PermX](https://cdn.hashnode.com/res/hashnode/image/upload/v1730324130150/2f8c4e49-4052-4aa7-a37d-b6302b07a0f9.png?w=1600&h=840&fit=crop&crop=entropy&auto=compress,format&format=webp)
