Exploiting Gitlab 12.8.1 – Laboratory @ HackTheBox

We are going to solve Tentacle, a 40-point machine on HackTheBox which involves a bit of Squid Proxy Magic 🦑(🦑... read more

We are solving Sink, a 50-point Linux machine on HackTheBox that involves HTTP Request Smuggling & retrieving secrets from Localstack. read more

Registry is a 40-point machine on HackTheBox that involves interacting with a docker registry to download a docker image and... read more

Nest is a 20-point Windows machine on HackTheBox that involves searching through smb shares and analyzing 2 short custom programs. read more

Bankrobber is a 50-point machine on hackthebox that involves exploiting a cross site scripting vulnerability to gain access to an... read more

We are solving Dynstr, a 30-point Linux machine on HackTheBox that involves a Dynamic DNS Service & a Command Injection. read more

Control is a 40-point windows machine on hackthebox that involves a sql injection which we use to upload a webshell.... read more

Sniper is a 30-point machine on HackTheBox that involves abusing a remote file inclusion and uploading a crafted chm file... read more

In this blog post, we will solve the Windows userland challenge that Blue Frost Security published for Ekoparty 2022. read more

Rainbow is a medium difficulty machine that involves a SEH-based buffer overflow for user and a UAC bypass for root. read more