Hack The Box… Jeeves – Hack The Box 29 Jun 202010 Jul 2020 Overall Summary Jeeves is a Windows machine from Hack The box that can be exploited through Jenkins by running a groovy reverse shell. Privilege escalation requires finding a kdbx file…
Linux… SkyTower: 1 – Vulnhub 29 Jun 2020 Overall Summary SkyTower 1 is a machine from Vulnhub to practice SQL injection to bypass a login page and to get familiar using a proxy. When getting a low privilege…
Linux… HackInOS: 1 24 Jun 202024 Jun 2020 Overall Summary HackInOS 1 is a fun machine from Vulnhub that can be very easy to get a foothold for exploitation but the fun part consists in looking at a…
Hack The Box… Bastard – Hack The Box 23 Jun 202024 Jun 2020 Overall Summary Bastard is a Windows machine from Hack the Box that is vulnerable to RCE through Drupal and privilege escalation can be accomplished by a kernel exploit because of…
Linux… DerpNStink: 1 21 Jun 202024 Jun 2020 Overall Summary DerpNStink is a Vulnhub machine that can be exploited by first discovering a WordPress site that has a vulnerable plugin called "Slideshow" which allows arbitrary file upload. Privilege…
Linux… DC: 6 – Vulnhub 17 Jun 202024 Jun 2020 Overall Summary DC: 6 is a Vulnhub machine that can be found at https://www.vulnhub.com/entry/dc-6,315/ and the exploitation process consists in discovering a WordPress site to then enumerate it to obtain…
TryHackMe… Brainstorm – TryHackme 16 Jun 202024 Jun 2020 A Note To Take In Consideration In this walk-through I'll be using a Windows 10 virtual machine to test the buffer overflow script. This post doesn't go over the installation…
Linux… Dina1.0.1 -vulnhub 12 Jun 202013 Jun 2020 Overall summary Dina is an easy Linux machine that can be exploited via Play SMS through PHP code execution. Even though the machine can be easily exploited it was a…
Linux… SickOs1.2 – Vulnhub 10 Jun 202013 Jun 2020 Overall Summary SickOs1.2 is a machine that can be exploited to get a low privilege shell by taking advantage of the PUT method to get RCE (remote command execution). To…
Linux… SickOs1.1 – Vulnhub 9 Jun 202014 Jun 2020 Overall Summary This Vulnhub machine was very straightforward as long as you understand what it means to have an open proxy. I found two different paths to get a low…