Oscp

This is my 22nd write-up for Blunder, a machine from TJNull’s list of HackTheBox machines for OSCP Practice. The full list can be found here. In a general penetration test or a CTF, there are usually 3 major phases that are involved. Enumeration and Scanning (Information Gathering). Initial Foothold. Privilege…

This is my 21st write-up for Admirer, a machine from TJNull’s list of HackTheBox machines for OSCP Practice. The full list can be found here. In a general penetration test or a CTF, there are usually 3 major phases that are involved. Enumeration and Scanning (Information Gathering). Initial Foothold. Privilege…

Timelapse is a retired box on Hack The Box, that provides a fun experience for developing your Active Directory and PowerShell skills as a penetration tester. Let’s start enumeration with a basic NMAP scan: nmap -sV -sC -oN scan.txt -O -p 1-65535 10.10.11.152

“Phishing” has become a household term. And for good reason too: Well over half of all cyberattacks start with a successful phishing campaign. The email attack vector is ubiquitous with a phishing attempt but there are many other ways to execute a deceptive manipulation of the target. One particularly lethal…

This is my 20th write-up for OpenAdmin, a machine from TJNull’s list of HackTheBox machines for OSCP Practice. The full list can be found here. In a general penetration test or a CTF, there are usually 3 major phases that are involved. Enumeration and Scanning (Information Gathering). Initial Foothold. Privilege…

This is my 19th write-up for Traverxec, a machine from TJNull’s list of HackTheBox machines for OSCP Practice. The full list can be found here. In a general penetration test or a CTF, there are usually 3 major phases that are involved. Enumeration and Scanning (Information Gathering). Initial Foothold. Privilege…

This insanely hard machine took me multiple days to identify every exploit and vulnerability and make everything work. First 60% of the box is relatively easy and str8 forward, but shell as winrm_user and PE was the reason why the box is insane. As you do this machine, and when…

Active Directory is a major component of many enterprises. In fact, over ninety percent of Fortune 1000 companies use Active Directory services. Windows OS is the second most used operating system in the world. Given this, we should know the fundamentals of Active Directory if we want to succeed in…

This is my 18th write-up for Postman, a machine from TJNull’s list of HackTheBox machines for OSCP Practice. The full list can be found here. In a general penetration test or a CTF, there are usually 3 major phases that are involved. Enumeration and Scanning (Information Gathering). Initial Foothold. Privilege…