Passage @ HackTheBox

"Weakened Keys" was an interesting crypto challenge on InfernoCTF. read more

Mango is a 30-point linux machine on hackthebox that involves a NoSQL-Injection which allows to obtain user passwords from a... read more

Obscurity is a 30-point Linux machine on HackTheBox that involves exploiting a command injection in a custom webserver, breaking a... read more

Registry is a 40-point machine on HackTheBox that involves interacting with a docker registry to download a docker image and... read more

Zetta is 40-point machine on hackthebox. We will get the ipv6 address of the box via ftp, use rsync to... read more

We are solving UT99, an intermediate windows box on PG Practice. On this box, we are going to exploit an... read more

In this blog post, we will solve the Windows userland challenge that Blue Frost Security published for Ekoparty 2022. read more

Solving Crossfit, a 50-point Linux machine on HackTheBox which involves a lot of cross-site scripting, a command-injection, and finally some... read more

Ghoul is a nice 40 points machine on hackthebox involving zip traversal, lateral movement, public exploits and some obscure hidden... read more

Book is a 30-point Linux machine on HackTheBox. We log into a web application by exploiting SQL truncation and then... read more