#htb

Summary The machine is running HelpDeskZ version 1.0.2 on port 80 (HTTP), which is...

Summary Team member names were listed on a web page, which allowed us to guess valid...

Summary There was a file readable by the guest account. Furthermore, it included...

Introduction Walking through my solve of the Attacking APIs Skills Assessment. This one...

Summary The target was running an outdated version of request-baskets, which allowed us...

Summary Anonymous login was allowed on the FTP server, exposing a text file that provided...

Summary A .git repository was exposed on the public-facing website. By examining it, the...

Summary The share contained a Groups.xml file storing credentials, which was readable by...

Summary I used credentials found in an SMB share to connect to MSSQL, and captured the...

OS: Linux Difficulty: Medium Initial Access: MCPJam Inspector RCE Privilege Escalation: JupyterLab →...

Summary This machine was compromised through a chain of three issues. First, the web...

Overview: This is a walkthrough of the Hospital Medium machine from Hack The Box. In...