Entradas recientes

Blackfield - Hack The Box

18 minuto(s) de lectura

Blackfield was a fun Windows box where we get a list of potential usernames from an open SMB share, validate that list using kerbrute, then find and crack th...

Admirer - Hack The Box

4 minuto(s) de lectura

Admirer is an easy box with the typical ‘gobuster/find creds on the webserver’ part, but after we use a Rogue MySQL server to read files from the server file...

Multimaster - Hack The Box

9 minuto(s) de lectura

Multimaster was a challenging Windows machine that starts with an SQL injection so we can get a list of hashes. The box author threw a little curve ball here...

Travel - Hack The Box

11 minuto(s) de lectura

Travel is an awesome box from my ATeam teammates xct and jkr. The box has a code review part where we analyze the source code of a PHP web app to find a comm...

Remote - Hack The Box

3 minuto(s) de lectura

Remote is a beginner’s box running a vulnerable version of the Umbraco CMS which can be exploited after we find the credentials from an exposed share. After ...