Hackthebox

This is my 27th write-up for Bastard, a machine from TJNull’s list of HackTheBox machines for OSCP Practice. The full list can be found here. In a general penetration test or a CTF, there are usually 3 major phases that are involved. Enumeration and Scanning (Information Gathering). Initial Foothold. Privilege…

This is my 26th write-up for Optimum, a machine from TJNull’s list of HackTheBox machines for OSCP Practice. The full list can be found here. In a general penetration test or a CTF, there are usually 3 major phases that are involved. Enumeration and Scanning (Information Gathering). Initial Foothold. Privilege…

Summary: “Cult Of Pickles” was an amazing web challenge by hackthebox. This unique challenge revolves around exploiting a pickle deserialization vulnerability by using SQL injection. In order to solve the challenge, both vulnerability have to be chained together in order to get the flag. Website: Upon starting the challenge on HackTheBox, we…

Task 1 What Nmap scanning switch employs the use of default scripts during a scan? Ans: -sC 這題在問在nmap中執行腳本掃描的是什麼指令，根據之前的主題使用過nmap，可以直接了解指令為 -sC

Bashed is a retired machine available on the HackTheBox platform, renowned for its ease of completion, which aligns with its official rating. The journey commences with the discovery of a hidden web shell. Let’s get started!🚀 Recon & Enumeration Let’s use nmap to scan for open ports and services:

This is my 25th write-up for Devel, a machine from TJNull’s list of HackTheBox machines for OSCP Practice. The full list can be found here. In a general penetration test or a CTF, there are usually 3 major phases that are involved. Enumeration and Scanning (Information Gathering). Initial Foothold. Privilege…

Hello everyone, I’m a beginner here! I’m trying to write a write-up on an HTB machine again. First things first, I performed port scanning and found that only 2 ports are open. These include port 22, which is SSH, and port 50051, which I have no idea about its purpose. …

This is my 24th write-up for Blue, a machine from TJNull’s list of HackTheBox machines for OSCP Practice. The full list can be found here. In a general penetration test or a CTF, there are usually 3 major phases that are involved. Enumeration and Scanning (Information Gathering). Initial Foothold. Privilege…

This is my 23rd write-up for Legacy, a machine from TJNull’s list of HackTheBox machines for OSCP Practice. The full list can be found here. In a general penetration test or a CTF, there are usually 3 major phases that are involved. Enumeration and Scanning (Information Gathering). Initial Foothold. Privilege…