Entradas recientes

Friendzone - Hack The Box

9 minuto(s) de lectura

Friendzone is an easy box with some light enumeration of open SMB shares and sub-domains. I used an LFI vulnerability combined with a writable SMB share to g...

Hackback - Hack The Box

20 minuto(s) de lectura

Hackback took me a long time to do. There are so many steps required just to get a shell. For extra difficulty, AppLocker is enabled and an outbound firewall...

Netmon - Hack The Box

4 minuto(s) de lectura

I think Netmon had the quickest first blood on HTB yet. The user flag could be grabbed by just using anonymous FTP and retrieving it from the user directory....

Querier - Hack The Box

7 minuto(s) de lectura

To solve Querier, we find an Excel spreadsheet that contains a VBA macro then use Responder to capture NTLM hashes from the server by forcing it to connect b...

Flujab - Hack The Box

15 minuto(s) de lectura

Flujab was without a doubt one of the toughest HTB box. It’s got a ton of vhosts that force you to enumerate a lot of things and make sure you don’t get dist...