Search for a command to run...
Series
Join me on my journey as I share all my learnings from Hackthebox in this series.
Hey, everyone welcome to my first blog in the hackthebox series, the first challenge we will start with is C.O.P https://app.hackthebox.com/challenges/395 After starting the challenge we see the following dashboard We can just view the products th...
Squashed is an easy-level Linux box from hackthebox https://app.hackthebox.com/machines/Squashed To start with the box let's start with basic Nmap enumeration for information gathering and enumeration nmap -sC -sV -O -A 10.10.11.191 > nmap.txt Star...
Welcome to the new blog in the Hack The Box series. Since I am trying to learn more about Kubernetes security, I was looking for a box related to Kubernetes on Hack The Box and found Steamcloud let us spin up our box, and start the VPN with the OVPN...
Starting with pilgrimage which is easy retired box from hackthebox From machine info page we do get a head start Machine has a exposed .git repo It uses a vulnerable version of ImageMagick Use this Vulnerable version to get SQLite database where p...
Starting with antique which is easy retired box from hackthebox From machine info page we do get a head start Machine has telnet and SNMP services running, we can get password for telnet from SNMP. A command execution through telnet service using e...
Nunchucks is an easy machine, from the description we know that there is a SSTI bug which helps us get initial foothold. So, as usual starting with our basic Nmap scan. # Nmap 7.94SVN scan initiated Thu Feb 29 21:11:53 2024 as: nmap -sC -sV -A -v -o ...