AarosionOct 5 · 9 min readBroScienceBroScience is a Medium Difficulty Linux machine that features a web application vulnerable to LFI. Through the ability to read arbitrary files on the target, the attacker gains an insight into how accarosion-labs.hashnode.dev
AarosionSep 23 · 11 min readBabyTwoBabyTwo is a medium-difficulty Windows machine set in an Active Directory environment. The initial foothold is gained through password guessing and the abuse of Windows logon scripts. Privilege escalaarosion-labs.hashnode.dev
PPreetimantSep 15 · 14 min readUnderstanding Modbus/TCP Through Packet Analysis — HTB Watch TowerWhile working through Hack The Box's ICS/SCADA track, I completed Watch Tower, an introductory packet-analysis lab built around Modbus/TCP traffic. The challenge itself was fairly short: a PCAP capturpreetimant.hashnode.dev
PPiyush KumawatSep 4 · 8 min readThe Danger of Low-Hanging Fruit: Lessons from HTB Starting Point (Tier 0)(Note: All techniques discussed here were executed in authorized Hack The Box lab environments for Learning purposes only.) Before diving into complex exploit chains, a solid Vulnerability Assessment piyushblogss.hashnode.dev
NNanoAug 31 · 7 min readMagical Palindrome | CTF WriteUpIf we take a look at the source code from the website, we'll see that there is a POST request being made with the data we send as the palindrome, based on the request, we'll get a different response 1blog.0xnano.com
AarosionAug 23 · 6 min readVulnCicadaVulnCicada is a Medium Windows Active Directory machine that involves discovering a password inside an image on a public share. With that password an attacker is able to discover that the machine is v1arosion-labs.hashnode.dev
MMOHIT SINGH PAPOLAAug 6 · 6 min readSendaiOVERVIEW So we have been told the user flag will be in C:/ directory and also gave us the target IP address Let's start the enumeration using NMAP ENUMERATION Let's start with Anonymous Login withblog.reapsec.com
LLong VoJul 21 · 42 min readHTB Attack Diaries - Bedside: The Clinic That Deserialized Its Own DeathIntroduction Bedside is a Medium-rated Linux box dressed up as a heart clinic "transitioning into the age of AI." And like most things that promise AI, what sits underneath the glossy paint is a chainlongvh0904.hashnode.dev
YYogeshwar PeelaJul 19 · 15 min readHackTheBox : Pterodactyl WriteupSummary Pterodactyl is a Linux box built around an unauthenticated RCE in the Pterodactyl game-server management panel. A static "MonitorLand" landing page on port 80 gives no functionality of its ownexploitnotes.hashnode.dev
YYogeshwar PeelaJul 19 · 17 min readHackTheBox : Logging WriteupSummary Logging is a Windows Active Directory box built around a long, credential-chaining path from a leaked service account password to full domain compromise. Initial access starts with SMB access exploitnotes.hashnode.dev
