HTB Writeup – Skyfall

Posted on 2024-07-04

Cloud hacking: MinIO, Vault, Symlink Race, Linux MOTD Hijack

HTB Writeup – Blazorized

Posted on 2024-06-30

Exploit the Blazor framework for Windows web app and SPN hijack.

HTB Writeup – Mist

Posted on 2024-06-25

The most insane Windows box on HTB.

HTB Writeup – Axlle

Posted on 2024-06-24

Create a malicious Excel XLL to phish via emails.

HTB Writeup – Corporate

Posted on 2024-06-18

The most insane Linux box on HTB.

HTB Writeup – Editorial

Posted on 2024-06-16

Season V, Linux, Easy, Git, CVE-2022-24439, SSRF

HTB Writeup – Blurry

Posted on 2024-06-09

USER Nmap does not give us much information but a domain: Then I went for subdomain enumeration to dig out more useful information using ffuf: We have 3 subdomain entries: The &

House of Water

Posted on 2024-06-07

Fake a 0x10001 chunk on the Tcache metadata.

HTB Writeup – FreeLancer

Posted on 2024-06-03

This is a game of Attack on Titan (進撃の巨人), a love story between Mikasa and Eren. Let’s start from the day when the Titans comes … WEB ADMIN Nmap for port scanning: P

HTB Writeup – BoardLight

Posted on 2024-05-25

CVE-2023-30253 for Dolibarr & CVE-2022-37706 for Enlightment

Axura