I’ve recently completed the Bug Bounty Hunter job-role path on HTB Academy, which was a fun and challenging ride. Overall, I found it enjoyable and learned some new skills. Isn’t that always a plus? The content actually helped me better prepare for my most recent round of technical interviews. Even though these all sound like […]
Academy Bug Bounty Hunter Path Review Read More »
Today’s post is a walkthrough of the Timelapse machine from HackTheBox. This is an easy Windows machine that is set up like a domain controller. To get an initial foothold, a few steps of password cracking and certificate magic are involved. Once on the server, a service account is discovered. Further enumeration reveals it has
HackTheBox Writeup: Timelapse Read More »
We’re going to walkthrough the Paper machine from HackTheBox in this post. This is an easy machine that is just a bit too CTF-like for my taste. However, it does teach some good recon and it showcases a relatively new vulnerability. Initial access is granted through SSH, after exploiting a file read vulnerability to read a
HackTheBox Writeup: Paper Read More »
Today we’ll be going through the Pandora machine from HackTheBox. This is an easy machine with a relatively simple foothold, if you remember to do your enumeration. Once on the machine, we have to do some port forwarding to expose an internal service. After compromising that service, we find that we have elevated our privileges
HackTheBox Writeup: Pandora Read More »
Today we’ll be attacking the HackTheBox Backdoor machine. This is an easy machine with a little bit more challenging of a foothold, as we have to do some extra reconnaissance to find what service an interesting port is running. From there, it is pretty much point-and-shoot. The privilege escalation involves abusing an SUID binary to
HackTheBox Writeup: Backdoor Read More »
Today we’ll be going over the HackTheBox machine titled Secret. This is an easy machine with an initial attack vector that comes from a mistake that developers should be extremely conscious about. The privilege escalation is a bit interesting and showcases the power of having unrestricted file read privileges. Let’s dive in. We’ll start off
HackTheBox Writeup: Secret Read More »