Exploit the Blazor framework for Windows web app and SPN hijack.

The most insane Windows box on HTB.

Create a malicious Excel XLL to phish via emails.

The most insane Linux box on HTB.

Season V, Linux, Easy, Git, CVE-2022-24439, SSRF

Safe-linking is a mitigation but also a weapon in some cases.

USER Nmap does not give us much information but a domain: Then I went for sub

Fake a 0x10001 chunk on the Tcache metadata.

This is a game of Attack on Titan (進撃の巨人), a love story between Mikasa and Er

CVE-2023-30253 for Dolibarr & CVE-2022-37706 for Enlightment