Writeups

MOST RECENT

Keeper – HTB writeup

On this machine we exploit default credentials in Request Tracker to harvest SSH user credentials from profile comments, recover the KeePass master password from a process crash dump via CVE-2023-32784, and convert an extracted PuTTY private key to achieve root access.

Nibbles – HTB Writeup

Explore how bad credentials and non-updated software can lead to a compromission of the system.

Blue – HTB Writeup

Explore how to exploit the Eternal-Blue vulnerability.

Solidstate – HTB writeup

Explore how to abuse a Mailbox to obtain credentials and to abuse hidden processes to escalate privileges.

Poison – HTB Writeup

Explore how to achive RCE from a Path Traversal vulnerability and to escalate privileges abusing internal services.

Amaterasu – OffSec Proving Grounds Writeup

This writeup details the compromise of a target via a Flask API directory traversal vulnerability to gain SSH access, followed by privilege escalation to root through cron job PATH hijacking.