HTB – Monitors
Monitors is an Hard box from HTB and created by TheCyberGeek. This box features a WordPress plugin exploit via wp-with-spritz allowing for LFI/RFI and an internal docker with Apache Tomcat running.
HTB – Blackfield
Today in Blackfield from HTB I explore a real-world example of a Windows Server when an account used for a specific task is not removed after.
HTB – Forge
Forge by NoobHacker9999 features a directory traversal/LFI exploitable website and hidden vhost. Once on the box you use python debugger on a script for root.
HTB – Schooled
Schooled is an Medium box from HTB and created by TheCyberGeek. This box features a XSS exploit and priv esc via moodle and a malicious pkg for root.
PwnBox & Kali
Using theGuildHall - pwnbox and xct - kali-clean to create a more personalized and optimized environment well still keeping that pwnbox look and feel.
HTB – Horizontall
Horizontall features a hidden vhost with an exploitable strapi. Once on the box we exploit a vulnerable laravel using an SSH port forward.
HTB – Knife
Knife is an Easy box from HTB and created by MrKN16H. This box features a PHP and chef based exploit.
HTB – Previse
Previse from HTB features an exploitable website with POST request registration and a unsanitized parameter. On the box you use PATH injection on a script to get root.
HTB – Writer
Writer from HTB features a website with a weak login and a code executable uploader. Once on the box we exploit postfix and apt allowing us to get root.
HTB – Love
Love is an Easy box from HTB and created by pwnmeow. This box features subdomain lookups and AlwaysInstallElevated privesc.
HTB – TheNotebook
TheNotebook is an Medium box from HTB and created by mostwanted002. This box features a CSRF exploit via JWT and a docker exploit.
HTB – BountyHunter
BountyHunter is an Easy box by ejedev. It has a poorly configured XML form vulnerable to an XXE/LFI which gives us creds. Next we exploit a script for root.
HTB – Pikaboo
Pikaboo is a Hard box created by pwnmeow and polarbearer. It features poorly configured web server vulnerable to an LFI and log poisoning technique.
HTB – Armageddon
Armageddon is an Easy box from HTB and created by bertolis. This box features the widely known Drupalgeddon exploit and a DirtySock escalation.