HackTheBox Optimum machine writeup.

HackTheBox Forest machine writeup. AS-REP Roasting, BloodHound path, DCSync to Domain Admin.

HackTheBox Conceal machine writeup. SNMP leaks IKE VPN PSK, IPsec tunnel setup, ASP webshell, JuicyPotato SYSTEM.

HackTheBox Active machine writeup. GPP password decryption + Kerberoasting to Domain Admin.

HackTheBox Granny machine writeup. IIS 6.0 WebDAV MOVE method bypass + Token Kidnapping privilege escalation.

HackTheBox Legacy machine writeup. Windows XP with SMBv1 — MS08-067 and EternalBlue exploits.

HackTheBox Jerry machine writeup. Apache Tomcat with default credentials, WAR file upload to SYSTEM.