Year of the Jellyfish @ TryHackMe

There is no excerpt because this is a protected post. read more

AI is a 30 point machine on hackthebox that involves SQL injection via speech and abusing an exposed java debugging... read more

We are solving Cereal, a 40-point machine on HackTheBox. For user, we will exploit a pretty tricky deserialization vulnerability in... read more

Smasher2 is a difficult 50 points machine on hackthebox, involving some guessing to get the user flag (because the author... read more

We are solving Sink, a 50-point Linux machine on HackTheBox that involves HTTP Request Smuggling & retrieving secrets from Localstack. read more

Writeup is a nice, medium difficulty machine on hackthebox, featuring the use of a publicly available sql injection exploit and... read more

Traverxec is a 20-point machine on hackthebox that involves using a public exploit on the nostromo webserver, cracking the passphrase... read more

ForwardSlash is a 40-point Linux Machine on HackTheBox. We use a path traversal vulnerability to get ssh credentials and abuse... read more

Safe is an "easy" machine on hackthebox, involving a simple buffer overflow and cracking a keepass file. read more

Registry is a 40-point machine on HackTheBox that involves interacting with a docker registry to download a docker image and... read more