Eric Hogue's Blog

Hack The Box Walkthrough - BountyHunter

Room: BountyHunter Difficulty: Easy URL: https://app.hackthebox.com/machines/BountyHunter Author: ejedev This is a very easy box where...

2022, Jul 03 — 10 minute read

Room: Horizontall Difficulty: Easy URL: https://app.hackthebox.com/machines/Horizontall Author: wail99 In this machine, I had to exploit...

2022, Jun 18 — 16 minute read

This is a very easy box. You need to exploit a SQL Injection vulnerability to...

2022, May 29 — 11 minute read

Besides being an excellent sysadmin, I hold many certifications; Zumba Instructor, Skydiving expert, barista of...

2022, May 23 — 5 minute read

Howdy, Lauren Chow asked me to send you our email templating application for you to...

2022, May 23 — 14 minute read

The Hackademy challenges are the beginner’s track at the NorthSec CTF. I had done a...

2022, May 23 — 9 minute read

Room: Pandora Difficulty: Easy URL: https://app.hackthebox.com/machines/Pandora Authors: TheCyberGeek dmw0ng Enumeration I started the box by...

2022, May 23 — 15 minute read

This is an easy machine where you have to abuse a Node application. You can...

2022, May 07 — 19 minute read

A very fun machine where you need to enumerate subdomains, abuse a SSTI vulnerability, and...

2022, Apr 19 — 15 minute read

This is a simple machine, but it has a few things installed on it. And...

2022, Apr 18 — 7 minute read

This is a very simple machine to own. It uses unpatched software with known vulnerability...

2022, Apr 17 — 6 minute read

As a web developer, it is very important to understand security. We need to know...

2022, Mar 14 — 5 minute read

In this box, I got to exploit some SQL Injection, Server Side Template Injection, and...

2022, Mar 11 — 12 minute read

This room of medium difficulty was really fun. You need to exploit vulnerabilities in a...

2022, Feb 12 — 13 minute read

This was a fun room where I had to exploit a Node.js deserialization vulnerability to...

2022, Feb 11 — 9 minute read