Htb
OSCP Prep
A collection of HackTheBox machine writeups completed during OSCP preparation.
Forest
HackTheBox Forest machine writeup. AS-REP Roasting, BloodHound path, DCSync to Domain Admin.
Conceal
HackTheBox Conceal machine writeup. SNMP leaks IKE VPN PSK, IPsec tunnel setup, ASP webshell, JuicyPotato SYSTEM.
Active
HackTheBox Active machine writeup. GPP password decryption + Kerberoasting to Domain Admin.
Magic
HackTheBox Magic machine writeup. SQL injection login bypass, double-extension PHP webshell upload, SUID binary PATH hijacking.
Grammy
HackTheBox Granny machine writeup. IIS 6.0 WebDAV MOVE method bypass + Token Kidnapping privilege escalation.
Brainfuck
HackTheBox Brainfuck machine writeup. WordPress auth bypass, SMTP credentials pivot, Vigenère cipher, RSA root flag.
Shocker
HackTheBox Shocker machine writeup. ShellShock (CVE-2014-6271) via CGI bash script, sudo perl privesc.
Lame
HackTheBox Lame machine writeup. Samba 3.0.20 username map script RCE and distcc CVE-2004-2687.
FriendZone
HackTheBox FriendZone machine writeup. DNS zone transfer, SMB credentials, LFI via pagename parameter, Python library hijacking.
Legacy
HackTheBox Legacy machine writeup. Windows XP with SMBv1 — MS08-067 and EternalBlue exploits.
Jerry
HackTheBox Jerry machine writeup. Apache Tomcat with default credentials, WAR file upload to SYSTEM.