James Pearson – Medium

Apr 10

Hack the Box — Lame

HTB Tags: #Internal #Network #SAMBA #RCE #CVE-2007–2447 #PublicVulnerabilities #CVE-Exploitation As part of my on-going development, I decided that having completed the HTB Starting Point series, I would work my way through the retired easy rated boxes, utilising what I had learnt so far. Lame is the first of these…

Htb Lame

3 min read

Mar 13

TryHackMe — IDE

THM Tags: #enumeration #ftp #public_exploit#privilege_escalation This is a free box, rated at easy on the TryHackMe scale and created by bluestorm and 403Exploit. As per the THM rules, passwords/cracked hashes/flags have been obfuscated. …

Tryhackme Walkthrough

10 min read

Mar 13

TryHackMe — Poster

THM Tags: #sql #metasploit #rdbms #enumeration This is a free box, rated at easy on the TryHackMe scale and created by stuxnet. As per the THM rules, passwords/cracked hashes/flags have been obfuscated. …

Tryhackme Walkthrough

8 min read

Feb 22

Hack the Box — Sequel

HTB Tags: #Linux #SQL #SQLi #MariaDB #WeakPassword This is the second box in Tier 1, as part of the Starting Point series, with a focus on database access through an open port on a Linux target. …

Htb

3 min read

Feb 11

Hack the Box — Appointment

HTB Tags: #Linux #SQL #SQLi #MariaDB This is the first in Tier 1, as part of the Starting Point series, with a focus database injection on a Linux target. Let’s start by enumerating with the standard commands, ping and nmap. ping ping $IP -c 4

Htb

3 min read

Feb 10

Hack the Box — Preignition

HTB Tags: #Linux #PHP #DefaultCredentials. This is the fifth in the Starting Point series, and the second of the non-free VIP boxes with a focus on directory busting a Linux target. As normal, let’s start by enumerating with the standard commands, ping and nmap. ping ping $IP -c 4

Htb Writeup

2 min read

Feb 7

The Cyber Grabs — Boot2root

This was the Cyber Grabs “CTF 0x03: Junior” competition that ran for 12 hours on Sunday, 6th February. It was a well thoughtout CTF for beginners, that included a number of areas such as: crypto forensics web reverse osint misc I will cover the boot2root section, which was prepared as…

Ctf

7 min read

Feb 6

Hack The Box — Unified

HTB Tags: #Linux #Web #CVE This is a new addition to the Starting Point series bringing it up to seventeen boxes. The focus this time was on the latest expliot to cause some hysteria — Log4J. Let’s get back to process and enumerate the box. ping

Htb Writeup

8 min read

Feb 4

TryHackMe — RootMe

Difficulty: Easy Tag line: A CTF for beginners, can you root me? Once the VPN is set up, we start our enumeration as normal by pinging the target to ensure that the link is stable enough to complete the challenge. ping nmap

Tryhackme

4 min read

Jan 30

Hack The Box — Explosion

HTB Tags: #Windows #Network #AccountMisconfiguration. This is the fourth in the Starting Point series ,the first of the non-free VIP boxes as well as being another MS Windows challenge. This time the focus is on the remote desktop protocol. …

3 min read