Category: Write-Ups

  • facts.htb HackTheBox machine - CMS exploit to root via facter RCE

    Facts HTB Writeup

    Command: nmap -Pn -sS -A 10.129.88.88 Command: echo 10.129.88.88 facts.htb >> /etc/hosts Command: ffuf -u http://facts.htb/FUZZ -w /usr/share/wordlists/dirbuster/directory-list-2.3-medium.txt -k -fc…

  • Devarea pwned

    DevArea HTB Writeup

    Introduction DevArea presents a realistic development environment with multiple privesc vectors exploiting misconfigured services and world-writable system binaries. From anonymous FTP to Apache CXF XXE and Hoverfly middleware injection, this box tests reconnaissance, service…

  • Kobold HTB Writeup

    Kobold HTB Writeup

    Introduction Kobold is an Easy-rated Linux machine from HackTheBox Season 10 that showcases a realistic privilege escalation vector through Docker group misconfiguration and PAM session…


  • VariaType HTB writeup

    Command: nmap -sV -Pn IP Command: echo ” IP variatype.htb” >> /etc/hosts Command: ffuf -u http://variatype.htb/ -H “Host: FUZZ.variatype.htb” -w…


  • Interpreter HTB Writeup

    Introduction The Interpreter box is designed to test a mix of web exploitation, cryptography awareness, Python code analysis, and privilege…


  • Pterodactyl HTB Writeup

    Command: nmap -A -Pn -sC 10.10.X.X -o nmapresult Command: echo ‘10.10.10.10 Pterodactyl.htb play.Pterodactyl.htb nothing special, started doing ffuf, below is…

  • Official HTB Writeup for Eighteen Machine

    Eighteen HTB Wiretup

    Eighteen HTB Wiretup Command: nmap -A -Pn -sC 10.10.xx.xx Command: impacket-mssqlclient kevin:’iNa2we6haRj2gaw!’@10.129.134.40 Command: enum_impersonate Command: EXECUTE AS LOGIN = ‘appdev’;…

  • NanoCorp HTB Writeup

    NanoCorp HTB Writeup

    NanoCorp HTB Writeup Command: nmap -A -Pn 10.10.11.93 -o nmapresult Command: echo 10.10.11.93 nanocorp.htb dc01.nanocorp.htb nanocorp.htb0 >> /etc/hosts Command: dirbuster…