Hack the Box – Password Hashes
Certain hashes might not be up to date as I have just implemented this feature as requested by Hack the Box. Send a screenshot of a root or comment on a blog post in the interim.
HTB – Doctor
Doctor from HTB is an Easy CTF style box featuring Server Side Template Injection( SSTI) and some privilege escalation via Splunk.
HTB – Admirer
Admirer taught me the basics to dirb and using proper Word Lists. It also taught me that I am really bad at creating my own MySQL database (even for testing).
HTB – Compromised
Compromised from HTB is an incident response type box in which a Linux environment and eCommerce solution, LiteCart have been exploited.
HTB – Blackfield
Today in Blackfield from HTB I explore a real-world example of a Windows Server when an account used for a specific task is not removed after.
HTB – Passage
Passage from HTB features a escalation using CuteNews and USBCreator as well as some base64/sha256 encrypted data.
HTB – Cache
Cache from Hack the Box (HTB) explores exploits available for the OpenEMR System. Once we get on the system we used Memcache to escalate.
HTB – Worker
Today I go through Worker by Hack the Box a medium level machine that focuses mainly on Azure DevOps on IIS. I highly recommend this box.
HTB – Magic
Today I run through Magic by Hack the Box. This guide has me using SQL Authentication Bypasses, ExifTool, MySQLDump and pspy.
HTB – BUFF
I workout my brain in this easy machine from Hack the Box called BUFF. I explore light buffer overflows and pivoting.