Entradas recientes

Tabby - Hack The Box

2 minuto(s) de lectura

Tabby was an easy box with simple PHP arbitrary file ready, some password cracking, password re-use and abusing LXD group permissions to instantiate a new co...

Fuse - Hack The Box

3 minuto(s) de lectura

To solve Fuse, we’ll do some enumeration to gather potential usernames from the print jobs information then build a password list from the strings on the web...

Dyplesher - Hack The Box

9 minuto(s) de lectura

Dyplesher was a pretty tough box that took me more than 10 hours to get to the user flag. There’s quite a bit of enumeration required to get to the git repo ...

Blunder - Hack The Box

4 minuto(s) de lectura

Blunder was an easy box for beginners that required bruteforcing the login for a Bludit CMS, then exploiting a known CVE through Metasploit to get remote cod...

Cache - Hack The Box

12 minuto(s) de lectura

On Cache, we start off with bypassing a simple login form that uses client-side user/password validation, then find a vhost with a vulnerable OpenEMR applica...