Hackthebox

Pandora was an easy rated linux machine, starting the box with an nmap scan, there was a web server hosting a template web page, nothing really was of interest on the site, after scanning UDP ports, SNMP service running which reavled a script being ran along with username password being…

Hi, I’m wwyy. This is a write-up for HTB Paper machine. First, according to masscan, there were 3 open ports for this machine.

Summary Blunder is a Linux easy-level box from Hack The Box. It consists of finding credentials using the cewl tool to log in to Bludit Portal. RCE exploits to gain an initial shell, then some database files can be read to get credentials for another user. Finally, a root shell…

Doctor- Hack The Box Introduction Doctor is an easy Linux HackTheBox level machine. In the user part, we will see the SSTI injection. We have to look at some log files to obtain the password. In the root part, we will exploit Splunk. Enumeration In the nmap we have found 3 open ports 22,80,8089. Visiting port…

Summary Luanne was the first NetBSD box on Hack The Box. Fuzzing landed us to Lua code injection to get a shell. We will get credentials for a webserver listening on localhost and find an SSH key hosted there to get to the second user. In the privilege escalation. Using netpgp…

Hello everyone I am Hac and today we are doing Cyber Apocalypse CTF 2022 , Specifically these challenges :- - Kryptos Support (Web) - BlinkerFluids (web) - Compressor (Misc) We will first start with Kryptos Support (Web) . Let’ s go ………

Summary Fuse is a medium-level windows machine on Hack The Box. An initial foothold is gained by discovering an expired password that can get access to SMB shares and RPCClient. A user shell is obtained by enumerating the printer in RPCClient and determining a password used by one of the users…

IP = 10.10.11.136* Difficulty: Easy Machine OS: Linux Learning Platform: hackthebox.com Finished on: Arch Linux Brief Description This machine showcases the SNMP(Simple Network Management Protocol) enumeration that can be found by using nmap and scanning using -sU switch to scan UDP ports. A tool named SNMPwalk can be used to extract information…

This is my write-up for the Pandora machine on HackTheBox that just retired! Here I detail the penetration testing steps taken to scan, exploit, and privilege escalate on this target machine. This machine is categorized as easy difficulty and was retired on May 21, 2022. Pandora Summary Target Information Machine Page IP Address: 10.10.11.136 Hostname: pandora.htb…