Author: Umer F.

  • facts.htb HackTheBox machine - CMS exploit to root via facter RCE

    Facts HTB Writeup

    Command: nmap -Pn -sS -A 10.129.88.88 Command: echo 10.129.88.88 facts.htb >> /etc/hosts Command: ffuf -u http://facts.htb/FUZZ -w /usr/share/wordlists/dirbuster/directory-list-2.3-medium.txt -k -fc…

  • Devarea pwned

    DevArea HTB Writeup

    Introduction DevArea presents a realistic development environment with multiple privesc vectors exploiting misconfigured services and world-writable system binaries. From anonymous FTP to Apache CXF XXE and Hoverfly middleware injection, this box tests reconnaissance, service…

  • Kobold HTB Writeup

    Kobold HTB Writeup

    Introduction Kobold is an Easy-rated Linux machine from HackTheBox Season 10 that showcases a realistic privilege escalation vector through Docker group misconfiguration and PAM session…


  • VariaType HTB writeup

    Command: nmap -sV -Pn IP Command: echo ” IP variatype.htb” >> /etc/hosts Command: ffuf -u http://variatype.htb/ -H “Host: FUZZ.variatype.htb” -w…


  • Interpreter HTB Writeup

    Introduction The Interpreter box is designed to test a mix of web exploitation, cryptography awareness, Python code analysis, and privilege…


  • Pterodactyl HTB Writeup

    Command: nmap -A -Pn -sC 10.10.X.X -o nmapresult Command: echo ‘10.10.10.10 Pterodactyl.htb play.Pterodactyl.htb nothing special, started doing ffuf, below is…

  • AirTouch - HTB Writeup

    AirTouch HTB Writeup

    Reconnaissance Command: nmap -A -Pn -sC -sU 10.129.9.109 -o nmapresult Command: snmp-check 10.129.9.109 -c public -t 10 -v 2c Command:…

  • MonitorsFour HTB

    MonitorsFour HTB Writeup

    MonitorsFour HTB Writeup User Flag Command: nmap -A -Pn -sC 10.10.11.98 -o nmapresult Command: echo 10.10.11.98 MonitorsFour.htb >> /etc/hosts Command:…