Hack The Box Walkthrough - Pilgrimage
In Pilgrimage, I had to exploit a known vulnerability in ImageMagick to obtain credentials. And...
2023, Nov 25 — 13 minute readIn Pilgrimage, I had to exploit a known vulnerability in ImageMagick to obtain credentials. And...
2023, Nov 25 — 13 minute readThis was a fun box. I had to get code execution through GPG by injecting...
2023, Nov 18 — 31 minute readIn this machine I had to get code execution through an application that converts LaTeX...
2023, Nov 04 — 14 minute readIn Jupiter I had to exploit an SQL Injection and run code through a network...
2023, Oct 21 — 24 minute readIn this box, I had to exploit SQL Injection through gRPC to get SSH credentials....
2023, Oct 07 — 11 minute readThis was a very fun box. I got the initial foothold by using nginx misconfiguration...
2023, Sep 30 — 22 minute readIn this box, I exploited a know vulnerability in Cacti. I found SSH credentials in...
2023, Sep 02 — 18 minute readOnlyForYou was a very fun box. I had to exploit a file read vulnerability, a...
2023, Aug 26 — 25 minute readIn this easy box, I exploited a know vulnerability in a Python library and abused...
2023, Aug 12 — 11 minute readIn Agile, I had to exploit a password manager to read arbitrary files on a...
2023, Aug 05 — 27 minute readIn this challenge, I combined an insecure file upload with request smuggling to get a...
2023, Jul 19 — 5 minute readIn this challenge I used a Wordpress plugin to get code execution, and a vulnerability...
2023, Jul 19 — 9 minute readI this challenge I had to find AWS credentials in an exposed S3 buckets. And...
2023, Jul 19 — 4 minute readIn this challenge, I had to exploit a NoSQL injection vulnerability in CouchDB. Very Easy...
2023, Jul 19 — 2 minute readIn this challenge I had to exploit a Java deserialization vulnerability in SnakeYaml. Easy As...
2023, Jul 19 — 3 minute read