Apr 10Hack the Box — LameHTB Tags: #Internal #Network #SAMBA #RCE #CVE-2007–2447 #PublicVulnerabilities #CVE-Exploitation As part of my on-going development, I decided that having completed the HTB Starting Point series, I would work my way through the retired easy rated boxes, utilising what I had learnt so far. Lame is the first of these…Htb Lame3 min read
Mar 13TryHackMe — IDETHM Tags: #enumeration #ftp #public_exploit#privilege_escalation This is a free box, rated at easy on the TryHackMe scale and created by bluestorm and 403Exploit. As per the THM rules, passwords/cracked hashes/flags have been obfuscated. …Tryhackme Walkthrough10 min read
Mar 13TryHackMe — PosterTHM Tags: #sql #metasploit #rdbms #enumeration This is a free box, rated at easy on the TryHackMe scale and created by stuxnet. As per the THM rules, passwords/cracked hashes/flags have been obfuscated. As usual, let’s start by enumerating with the standard commands, ping, nmap and gobuster and see where…Tryhackme Walkthrough8 min read
Feb 22Hack the Box — SequelHTB Tags: #Linux #SQL #SQLi #MariaDB #WeakPassword This is the second box in Tier 1, as part of the Starting Point series, with a focus on database access through an open port on a Linux target. As usual, let’s start by enumerating with the standard commands, ping and nmap…Htb3 min read
Feb 11Hack the Box — AppointmentHTB Tags: #Linux #SQL #SQLi #MariaDB This is the first in Tier 1, as part of the Starting Point series, with a focus database injection on a Linux target. Let’s start by enumerating with the standard commands, ping and nmap. ping ping $IP -c 4Htb3 min read
Feb 10Hack the Box — PreignitionHTB Tags: #Linux #PHP #DefaultCredentials. This is the fifth in the Starting Point series, and the second of the non-free VIP boxes with a focus on directory busting a Linux target. As normal, let’s start by enumerating with the standard commands, ping and nmap. ping ping $IP -c 4Htb Writeup2 min read
Feb 7The Cyber Grabs — Boot2rootThis was the Cyber Grabs “CTF 0x03: Junior” competition that ran for 12 hours on Sunday, 6th February. It was a well thoughtout CTF for beginners, that included a number of areas such as: crypto forensics web reverse osint misc I will cover the boot2root section, which was prepared as…Ctf7 min read
Feb 6Hack The Box — UnifiedHTB Tags: #Linux #Web #CVE This is a new addition to the Starting Point series bringing it up to seventeen boxes. The focus this time was on the latest expliot to cause some hysteria — Log4J. Let’s get back to process and enumerate the box. pingHtb Writeup8 min read
Feb 4TryHackMe — RootMeDifficulty: Easy Tag line: A CTF for beginners, can you root me? Once the VPN is set up, we start our enumeration as normal by pinging the target to ensure that the link is stable enough to complete the challenge. ping nmapTryhackme4 min read
Jan 30Hack The Box — ExplosionHTB Tags: #Windows #Network #AccountMisconfiguration. This is the fourth in the Starting Point series ,the first of the non-free VIP boxes as well as being another MS Windows challenge. This time the focus is on the remote desktop protocol. …3 min read