Hackthebox Category

blog
5+ Note
Focus
OSCP · Red Team
Structure
Recon → Exploit

Hackthebox blog

Filters

  • HTB Monitors Walkthrough: Cacti SQLi and Container Escape
    walkthroughs

    HTB Monitors Walkthrough: Cacti SQLi and Container Escape

    Walkthrough of Hack The Box Monitors: SQLi in Cacti (CVE-2020-14295), deserialization in OFBiz (CVE-2020-9496), and container escape via kernel module.

    Discover more Discover more
  • HTB Schooled: Stored XSS on Moodle at Root on FreeBSD
    walkthroughs

    HTB Schooled: Stored XSS on Moodle at Root on FreeBSD

    Hack The Box Schooled Write-Up: from Stored XSS on Moodle to webshell, MySQL credentials and privilege escalation to root on FreeBSD via pkg.

    Discover more Discover more
  • HTB Scepter Walkthrough: NFS, ESC9, ESC14 and DCSync
    walkthroughs

    HTB Scepter Walkthrough: NFS, ESC9, ESC14 and DCSync

    Complete WriteUp at Hack The Box Scepter: NFS, PFX/PEM certificates, ADCS ESC9, ESC14, altSecurityIdentities and final DCSync.

    Discover more Discover more
  • HTB Haze Walkthrough: Splunk RCE and AD Attack Chain
    walkthroughs

    HTB Haze Walkthrough: Splunk RCE and AD Attack Chain

    HTB Haze Writeup: CVE-2024-36991 on Splunk, credential decryption with splunksecrets, GMSA abuse, Shadow Credentials on AD and RCE up to SYSTEM.

    Discover more Discover more
  • HTB Hathor Walkthrough ITA: AppLocker Bypass, DLL Hijacking and DCSync on Windows Insane
    walkthroughs

    HTB Hathor Walkthrough ITA: AppLocker Bypass, DLL Hijacking and DCSync on Windows Insane

    HTB Hathor Walkthrough: AppLocker Bypass, DLL Hijacking over SMB, Code Signing with a Stolen Certificate, and DCSync Without NTLM. Insane Windows Machine

    Discover more Discover more