#hackthebox

Around three months ago, I successfully compromised Hercules, an Insane-rated Windows Active...

1. Environment & Tooling This box is unusual: the entry point is a remote Linux...

Enigma is an easy Linux machine on Hack The Box that requires chaining network file sharing, email...

Attack Chain Summary The full chain was: Anonymous SMB -> support-tools share ->...

Target: Lame OS: Linux Difficulty: Easy Overview Lame is a classic Hack The Box machine...

Summary Garfield is a Windows Active Directory box centered on an attack path that's...

Summary Logging is a Windows Active Directory box built around a long, credential-chaining...

A complete walkthrough of HackTheBox DevArea — chaining an Apache CXF SSRF vulnerability, Hoverfly...

Summary The "Void Whispers" mail-settings panel passes the user-supplied sendMailPath...

Summary The ticket portal generates guest session JWTs client-side, signing them with an...

Summary JinjaCare is a Flask-based COVID-19 vaccination verification web app. The intended...

Summary NeoVault is a small banking app (Next.js frontend + REST API) that lets users...