Writeup on Shibboleth (Linux HackTheBox) | Initial foothold was through Zabbix code execution | Privesc was by exploiting vulnerable database
Execute
Writeup on Horizontall (Linux HackTheBox), w/o Metasploit, both user & root exploitation through enumeration & exploitation using CVE.
Execute
Writeup on Forge (Linux HackTheBox), w/o Metasploit, exploiting SSRF & SUDO permissions for privilege escalation.
Execute
Writeup on Previse (Linux HackTheBox), w/o Metasploit, exploiting command injection & PATH variable exploitation for Privilege escalation.
Execute
Writeup on Delivery (Linux HackTheBox) | email impersonation for initial foothold | enumeration & rule-based hash cracking for PrivEsc |
Execute
Writeup on Cap (Linux HackTheBox), w/o Metasploit, exploiting parameter tampering & set user capabilities for Privilege escalation.
Execute
Writeup on Shocker (Linux HackTheBox), w/o Metasploit, exploiting Shellshock & SUDO permissions for privilege escalation.
Execute
Writeup on BountyHunter (Linux HackTheBox), w/o Metasploit, exploiting XXE & performing code analysis for Privilege escalation.
Execute
This is a writeup on Blue (Windows HackTheBox), running SMB. Exploitation invades the Eternal Blue MS17-010 vulnerability.
Execute
This writeup is based on Devel HackTheBox which is an easy-rated Windows machine. It having File Upload and Windows Kernel Vulnerability.
Execute
This is a writeup on Arctic (Linux HackTheBox), running Adobe's ColdFusion. Exploitation uses CVEs, later requiring privilege escalation for the root flag.
Execute