Today we’ll be going through the Pandora machine from HackTheBox. This is an easy machine with a relatively simple foothold, if you remember to do your enumeration. Once on the machine, we have to do some port forwarding to expose an internal service. After compromising that service, we find that we have elevated our privileges […]
HackTheBox Writeup: Pandora Read More »
Today we’ll be attacking the HackTheBox Backdoor machine. This is an easy machine with a little bit more challenging of a foothold, as we have to do some extra reconnaissance to find what service an interesting port is running. From there, it is pretty much point-and-shoot. The privilege escalation involves abusing an SUID binary to
HackTheBox Writeup: Backdoor Read More »
Today we’ll be going over the HackTheBox machine titled Secret. This is an easy machine with an initial attack vector that comes from a mistake that developers should be extremely conscious about. The privilege escalation is a bit interesting and showcases the power of having unrestricted file read privileges. Let’s dive in. We’ll start off
HackTheBox Writeup: Secret Read More »
When it comes to penetration testing, a home lab is the best way to get tons of hands-on practice, especially if you are just getting into the field. We’re going to run through the basics of getting some virtual machines set up so that you can have at it. Part 1: Virtualization Software (VMware) First,
Setting up a Penetration Testing Lab Read More »