PKPiyush Kumawatinpiyushblogss.hashnode.dev·Sep 4 · 8 min readThe Danger of Low-Hanging Fruit: Lessons from HTB Starting Point (Tier 0)(Note: All techniques discussed here were executed in authorized Hack The Box lab environments for Learning purposes only.) Before diving into complex exploit chains, a solid Vulnerability Assessment 00
NNanoinblog.0xnano.com·Aug 31 · 7 min readMagical Palindrome | CTF WriteUpIf we take a look at the source code from the website, we'll see that there is a POST request being made with the data we send as the palindrome, based on the request, we'll get a different response 10
Aarosioninarosion-labs.hashnode.dev·Aug 23 · 6 min readVulnCicadaVulnCicada is a Medium Windows Active Directory machine that involves discovering a password inside an image on a public share. With that password an attacker is able to discover that the machine is v10
MSMOHIT SINGH PAPOLAinblog.reapsec.com·Aug 6 · 6 min readSendaiOVERVIEW So we have been told the user flag will be in C:/ directory and also gave us the target IP address Let's start the enumeration using NMAP ENUMERATION Let's start with Anonymous Login with00
LVLong Voinlongvh0904.hashnode.dev·Jul 21 · 42 min readHTB Attack Diaries - Bedside: The Clinic That Deserialized Its Own DeathIntroduction Bedside is a Medium-rated Linux box dressed up as a heart clinic "transitioning into the age of AI." And like most things that promise AI, what sits underneath the glossy paint is a chain00
YPYogeshwar Peelainexploitnotes.hashnode.dev·Jul 19 · 15 min readHackTheBox : Pterodactyl WriteupSummary Pterodactyl is a Linux box built around an unauthenticated RCE in the Pterodactyl game-server management panel. A static "MonitorLand" landing page on port 80 gives no functionality of its own00
YPYogeshwar Peelainexploitnotes.hashnode.dev·Jul 19 · 17 min readHackTheBox : Logging WriteupSummary Logging is a Windows Active Directory box built around a long, credential-chaining path from a leaked service account password to full domain compromise. Initial access starts with SMB access 00
YPYogeshwar Peelainexploitnotes.hashnode.dev·Jul 17 · 4 min readHackTheBox : WayWitch WriteupSummary The ticket portal generates guest session JWTs client-side, signing them with an HMAC secret (halloween-secret) that's hardcoded directly in the page's JavaScript. Since the server verifies to00
YPYogeshwar Peelainexploitnotes.hashnode.dev·Jul 17 · 4 min readHackTheBox : Void Whispers WriteupSummary The "Void Whispers" mail-settings panel passes the user-supplied sendMailPath field directly into shell_exec("which $sendMailPath") with no escaping. The app only filters literal whitespace, w00
YPYogeshwar Peelainexploitnotes.hashnode.dev·Jul 17 · 19 min readHackTheBox : Race WriteupSummary Race is a Linux box built around Grav CMS. The path in is a chain of small information leaks rather than one big bug: an exposed phpsysinfo instance with default creds leaks a process list, th00
