PPiyush Kumawat·Sep 4The Danger of Low-Hanging Fruit: Lessons from HTB Starting Point (Tier 0)A hands-on security breakdown of HTB Tier 0. Explore how unauthenticated Telnet, FTP, SMB, and Redis services expose networks and how to remediate them.8 min read·piyushblogss.hashnode.dev
NNeville Iregi·Apr 30Hack The Box: BikeServer-Side Template Injection (SSTI) in a Node.js application using the Handlebars template engine14 min read·m0ng00s3-blog.hashnode.dev
NNano·Apr 16DarkZero WriteUpAs is common in real life pentests, you will start the DarkZero box with credentials for the following account john.w / RFulUtONCOL!10 min read·blog.0xnano.com
NNeville Iregi·Mar 21Hack The Box Lab: ThreeOrganizations of every type, size, and industry are using the cloud for a wide variety of use cases, such as data backup, storage, disaster recovery, email, virtual desktops, software development and12 min read·m0ng00s3-blog.hashnode.dev
CCh4os1·Mar 16Installing the Latest Certipy on HTB Pwnbox: A Step-by-Step GuideIf you're doing Active Directory certificate attacks on HackTheBox, you've probably heard or used Certipy - the incredible tool by Oliver Lyak for PKI abuse. However, if you've tried installing it on3 min read·ch4os1.hashnode.dev
AAdham·Feb 8HackTheBox Dancing (Windows Room) — Full WalkthroughThis article covers a mix of theoretical knowledge and hands-on practice focused on the SMB (Server Message Block) protocol. Using the Dancing room on HTB3 min read·cyberlabhelp.hashnode.dev
