Ctf

This is my 22nd write-up for Blunder, a machine from TJNull’s list of HackTheBox machines for OSCP Practice. The full list can be found here. In a general penetration test or a CTF, there are usually 3 major phases that are involved. Enumeration and Scanning (Information Gathering). Initial Foothold. Privilege…

Eternal Blue is a windows exploit that was created by the NSA and used in the 2017 WannaCry ransomware attack. Eternal Blue exploits a vulnerability in microsoft’s SMB protocol. Information Gathering As always we start our CTFs with gathering info and doing recon. Let’s start with Nmap and do some port scanning…

In this write-up, I will explain how I solved Hacktoria’s operation of May 2023. Summary of the prologue (by chatGPT) : Maksim, a skilled operative for the clandestine organization called the Order, receives a mysterious assignment. With his expertise honed through rigorous training, Maksim eagerly prepares for the mission. At an airport, he meets an enigmatic contact…

Hello hunters, let me explain how did I overcome this XSS challenge set up by the bug bounty platform Intigriti. It may be a source of inspiration for some of you during your research. To start, let’s see the rules The challenge runs from the 23rd of May until the 29th of May, 11:59 PM CET…

This is my 21st write-up for Admirer, a machine from TJNull’s list of HackTheBox machines for OSCP Practice. The full list can be found here. In a general penetration test or a CTF, there are usually 3 major phases that are involved. Enumeration and Scanning (Information Gathering). Initial Foothold. Privilege…

The challenge: A little introduction: Every month, the Intigriti platform hosts a fun web security challenge created by community members. They also reward a few members who successfully solve the challenge with a €50 swag voucher for their swag shop (Check it out!) The challenge this time is to pop an XSS…

Timelapse is a retired box on Hack The Box, that provides a fun experience for developing your Active Directory and PowerShell skills as a penetration tester. Let’s start enumeration with a basic NMAP scan: nmap -sV -sC -oN scan.txt -O -p 1-65535 10.10.11.152

Enumeration Firstly, we do a port scan with Nmap

This is my 20th write-up for OpenAdmin, a machine from TJNull’s list of HackTheBox machines for OSCP Practice. The full list can be found here. In a general penetration test or a CTF, there are usually 3 major phases that are involved. Enumeration and Scanning (Information Gathering). Initial Foothold. Privilege…