JWT & Docker CVE – TheNotebook @ HackTheBox

This post is a walkthrough of Zipper, an interesting machine on hackthebox.eu featuring the zabbix network monitoring application. It involves... read more

Mango is a 30-point linux machine on hackthebox that involves a NoSQL-Injection which allows to obtain user passwords from a... read more

Control is a 40-point windows machine on hackthebox that involves a sql injection which we use to upload a webshell.... read more

We are solving Sink, a 50-point Linux machine on HackTheBox that involves HTTP Request Smuggling & retrieving secrets from Localstack. read more

Ghoul is a nice 40 points machine on hackthebox involving zip traversal, lateral movement, public exploits and some obscure hidden... read more

We are solving Tenet, a 30-point machine HackTheBox that involves a simple PHP deserialization vulnerability, password reuse and a race... read more

Bastion is an easy 20 points machine on hackthebox. It is about mounting a .vhd file over the network, retrieving... read more

We are solving Previse, an easy linux machine on HackTheBox that involves a Command Injection & Path Hijacking. read more

We are solving Heist from PG Practice. Heist is a really cool Windows machine that involves stealing a hash, reading... read more

Heist is an "easy" machine on hackthebox, involving some enumeration (especially rpc) and some forensics (dumping firefox memory). read more