hackthebox

This challenge sees a user shell obtained by exfiltrating sensitive information via a vulnerability called Heartbleed in the OpenSSL cryptography library; which is a widely used implementation of the Transport Layer Security (TLS) protocol. From there, I was able to overwrite a read-only file (/etc/passwd) and grant myself root

Aragog was a delightful challenge on HackTheBox. It’s up there with one of my favorites so far! To complete this box, I was able to get a shell by exploiting an XML External Entity (XXE) vulnerability and lifting the ssh key file of a user. Once logged in, I

In this post, I demonstrate how to identify a data validation vulnerability in an image upload plugin, and bypass content filters to execute malicious code and gain access to the remote system. Enumeration I run a standard nmap scan on the host to find ports 22 (SSH) and 80 (HTTP)

Patching your operating system isn’t enough. You need to patch your third-party applications too as they can contain vulnerabilities such as buffer overflows that allow a system to be exploited. Enumeration First step as always, is to see what we can discover with an nmap scan root@kali:~/htb/

Jeeves demonstrates the seriousness of securing access to applications, and the importance of practising good password hygiene. First, I take advantage of broken access controls on a Jenkins installation to obtain remote code execution (RCE) and gain a foothold on the system. Next, I locate a KeePass database and due

Bashed highlights the importance of having a separate environment for development and production. In this challenge, a developer creating a new web application uses a production web server for the development environment. I demonstrate abusing the artifacts left behind by the developer in order to compromise the system. Enumeration Starting