We’re going to walkthrough the Paper machine from HackTheBox in this post. This is an easy machine that is just a bit too CTF-like for my taste. However, it does teach some good recon and it showcases a relatively new vulnerability. Initial access is granted through SSH, after exploiting a file read vulnerability to read a […]
HackTheBox Writeup: Paper Read More »
Today we’ll be going through the Pandora machine from HackTheBox. This is an easy machine with a relatively simple foothold, if you remember to do your enumeration. Once on the machine, we have to do some port forwarding to expose an internal service. After compromising that service, we find that we have elevated our privileges
HackTheBox Writeup: Pandora Read More »
We’re going to get a lot less technical in this post. This is partially because I’ve been traveling lately and haven’t got my hands on the keyboard as much as I’d like, but that’s life. If you’re curious about what it takes to become a cyber security professional, whether it be a penetration tester or
What Makes a Good Cyber Security Professional? Read More »
Today we’ll be attacking the HackTheBox Backdoor machine. This is an easy machine with a little bit more challenging of a foothold, as we have to do some extra reconnaissance to find what service an interesting port is running. From there, it is pretty much point-and-shoot. The privilege escalation involves abusing an SUID binary to
HackTheBox Writeup: Backdoor Read More »
Today we’ll be going over the HackTheBox machine titled Secret. This is an easy machine with an initial attack vector that comes from a mistake that developers should be extremely conscious about. The privilege escalation is a bit interesting and showcases the power of having unrestricted file read privileges. Let’s dive in. We’ll start off
HackTheBox Writeup: Secret Read More »
When it comes to penetration testing, a home lab is the best way to get tons of hands-on practice, especially if you are just getting into the field. We’re going to run through the basics of getting some virtual machines set up so that you can have at it. Part 1: Virtualization Software (VMware) First,
Setting up a Penetration Testing Lab Read More »