DynamoDB & S3 Buckets – Bucket @ HackTheBox

We are solving Sink, a 50-point Linux machine on HackTheBox that involves HTTP Request Smuggling & retrieving secrets from Localstack. read more

Postman is a 20-point machine on hackthebox, that involves using redis to write an ssh key to disk, cracking the... read more

Book is a 30-point Linux machine on HackTheBox. We log into a web application by exploiting SQL truncation and then... read more

We are solving Kevin, an easy-rated Windows machine on PG Practice that involves a SEH Based Buffer Overflow. read more

Solving Crossfit, a 50-point Linux machine on HackTheBox which involves a lot of cross-site scripting, a command-injection, and finally some... read more

Monteverde is a 30-point Windows machine on HackTheBox that involves some LDAP and SMB enumeration to get the user flag.... read more

We are solving Hutch from PG-Practice. For user, we will get credentials from LDAP & use them to upload a... read more

Safe is an "easy" machine on hackthebox, involving a simple buffer overflow and cracking a keepass file. read more

We are going to solve Ophiuchi a 30-point machine on HackTheBox that involves a YAML parser vulnerability and a custom... read more

Baby is an easy machine on Vulnlab that involves enumerating LDAP & spraying credentials. For SYSTEM we exploit SeBackup &... read more