HackTheBox – CozyHosting
Marceli Information Gathering and Vulnerability Scanning Initial nmap shows that 3 ports are opened. Later I did another scan with all ports: I have run also nikto scan, but nothing interesting…
hackthebox
HackTheBox – Active
Active is active directory box with Domain Controller installed.
HackTheBox – Optimum
This one didn't work, because I didn't run it as intended It opens elevated shell as a new process which is not visible in shell. I should redirect it to…
HackTheBox – Devel
Devel is Windows 7 box with IIS server and anonymous access to FTP
HackTheBox – Legacy
It is an old box with Windows XP SP3 vulnerable to MS08-067. Exploitation is quite simple with Metasploit.
HackTheBox – Nineveh
Only http/https ports are opened
HackTheBox – Cronos
nmap shows 3 open ports: ssh, bind dns service and Apache http Default page
HackTheBox – Sunday CTF walkthrough
root, sammy, sunny - this users looks diffrent than others, probably other users have never been used I had issues with using hydra Hydra didn't work, because it takes long…
HackTheBox – Blue CTF walkthrough
CVE-2017-0143 nmap --script=smb-os-discovery.nse --script-args=unsafe=1 -script=smb-vuln-ms17-010.nse -p445 <ip> This host is vulnerable to popular CVE-2017-0143, I decided to use metasploit: I have system privileges
Buffer Overflow
CVE
Enumeration
Privilege Escalation
Red Team
Reverse engineering
Weak configuration
HackTheBox – October CTF walkthrough (BoF)
No hints regarding version of October CMS admin:admin I wanted to check version: There is a possibility to upload a files. File with extension .php5 is located, so I will…