All Articles & Walkthroughs

Granny is an easy HackTheBox machine that is running a vulnerable Microsoft IIS 6.0 server. Initial access includes exploiting WebDAV Buffer Overflow(CVE-2017-7269), and privilege escalation includes exploiting a kernel vulnerability(MS14-070).

Many small business owners assume they are not big enough to be attacked by cybercriminals, and only banks, hospitals and bigger businesses are the targets. Unfortunately, this is far from the truth. For most attackers, small to medium businesses are an easy target that can yield results with low effort.

Cap is a HackTheBox easy machine that points out the risks of credential reuse, unauthenticated services and overprivileged services. The initial foothold involves finding an old PCAP file using an IDOR vulnerability and credential reuse. Escalating privileges includes abusing an overprivileged service.

Popcorn is a HackTheBox medium machine that emphasises the importance of enumeration. This machine involves exploiting the image upload MIME-type bypass in a torrent-hosting web application to gain an initial foothold. Privilege escalation involves exploiting a legacy Linux kernel exploit famously known as DirtyCow.

Arctic is a HackTheBox easy Microsoft Windows Server 2008 machine that is running Adobe ColdFusion 8. The initial foothold involves exploiting an unauthenticated file upload on the legacy web application. The privilege escalation involves abusing token impersonation privileges on an unpatched Windows Server build to achieve full administrative access.

Nexus is a HackTheBox easy machine that points out why committing credentials to the version control system is not secure and how it leads to a credential leak. This machine exploits a credential leak through Gitea, an authenticated file upload to get an initial foothold, credential reuse and low-level Git object manipulation to escalate privileges.

When auditing a modern web application, jumping straight into reading the controller code is overwhelming, and it creates context collapse. Line-by-line code analysis often misses misconfigurations, hidden entry points and authorization flows. Adopting a top-down review methodology solves this by bringing a clear, repeatable structure to the entire audit.

Beep is a HackTheBox Linux machine that runs Elastix and Webmin on ports 443 and 10000. Exploiting Local File Inclusion in the Elastix application will expose passwords for the admin panel and the root SSH access ultimately.

Devel is a vulnerable Windows 7 machine on HackTheBox with anonymous FTP access to the IIS web server root directory. Escalating privileges involves exploiting CVE-2011-1249 (MS11-046).