Category Htb-Writeup

blog
4+ Note
Focus
OSCP · Red Team
Structure
Recon → Exploit

Htb-Writeup blog

Filters

  • HTB Falafel Walkthrough: SQLi, PHP Type Juggling and Privesc
    walkthroughs

    HTB Falafel Walkthrough: SQLi, PHP Type Juggling and Privesc

    Hack The Box's Falafel Machine Write-Up: User Enumeration, Blind SQL Injection, PHP Login Bypass, RCE Upload, and Linux Privilege Escalation.

    Discover more Discover more
  • HTB Love Walkthrough: SSRF, SQLi Time-Based and Privesc
    walkthroughs

    HTB Love Walkthrough: SSRF, SQLi Time-Based and Privesc

    Write-Up HTB Love, Easy VM: SQLi time-based, NTLM attempt on Responder, SSRF towards 5000, and privesc with AlwaysInstallElevated. Every dead end explained.

    Discover more Discover more
  • HTB Scepter Walkthrough: NFS, ESC9, ESC14 and DCSync
    walkthroughs

    HTB Scepter Walkthrough: NFS, ESC9, ESC14 and DCSync

    Complete WriteUp at Hack The Box Scepter: NFS, PFX/PEM certificates, ADCS ESC9, ESC14, altSecurityIdentities and final DCSync.

    Discover more Discover more
  • HTB Sekhmet Walkthrough: Node.js Deserialization, WAF Bypass and DPAPI
    walkthroughs

    HTB Sekhmet Walkthrough: Node.js Deserialization, WAF Bypass and DPAPI

    HTB Sekhmet Insane,WriteUp Complete: insecure deserialization in node-serialize, bypass ModSecurity with Unicode encoding, ZipCrypto, Kerberos on Linux and DPAPI on Active Directory.

    Discover more Discover more