HTB – Blunder
I try using PwnBox from HTB to do the Blunder box. It turns out to be a blunder for me and navigating the web UI.
HTB – Shocker
Today I explore Shocker from HTB; a OSCP like box featuring a Shellshock exploitable web server. Once on the box we use perl to escalate sudo.
HTB – Optimum
Today I explore Optimum from HTB; a OSCP like box featuring a Rejetto HTTP File Server v2.3 and a MS16-098 privilege escalation.
HTB – Cache
Cache from Hack the Box (HTB) explores exploits available for the OpenEMR System. Once we get on the system we used Memcache to escalate.
HTB – Beep
Using Beep from HTB I exploit Elastix 2.2.0 using a local file inclusion (LFI). I then attempted to password spray SSH and run into issues with ciphers.
HTB – Devel
Using Devel from HTB I will show you how to exploit a Windows Server with anonymous FTP enabled and IIS. We will then run MS11-046 exploit to get root.
HTB – Legacy
Today using Legacy from HTB I will show you how to exploit MS17-010 EternalBlue with a custom shellcode and without the use of Metasploit.
HTB – Lame
Today using Lame from HTB I will show you how to exploit SMB shares with null authentication. This is for SAMBA 3.0.20 and without the need for Metasploit.
PSA – John the Ripper ‘john’
Today I was going through a new box on Hack the Box when I ran across an issue with 'john' and 'Warning: invalid UTF-8' causing a valid hash to not be found.
HTB – Blackfield
Today in Blackfield from HTB I explore a real-world example of a Windows Server when an account used for a specific task is not removed after.
HTB – Admirer
Admirer taught me the basics to dirb and using proper Word Lists. It also taught me that I am really bad at creating my own MySQL database (even for testing).
HTB – Passage
Passage from HTB features a escalation using CuteNews and USBCreator as well as some base64/sha256 encrypted data.