P.O.O. Endgame @ HackTheBox

Solving Crossfit, a 50-point Linux machine on HackTheBox which involves a lot of cross-site scripting, a command-injection, and finally some... read more

Video & additional notes for StreamIO, a medium difficulty Windows machine on HackTheBox that involves manual MSSQL Injection, going from... read more

SwagShop is a very easy machine on hackthebox, involving a public exploit and sudo abuse. read more

Book is a 30-point Linux machine on HackTheBox. We log into a web application by exploiting SQL truncation and then... read more

Solving Passage on HackTheBox. This is an easy box involving 2 public exploits, one for the CuteNews CMS and one... read more

We are solving TheNotebook, a 30-point Machine on HackTheBox where we'll modify a JWT Token, upload a PHP-Webshell and use... read more

Time is a 30-point machine on HackTheBox that involves using a public exploit for a CVE and overwriting a shell... read more

This short write-up is about Irked, a rather easy machine on hackthebox featuring an irc backdoor, some steganography and a... read more

We are solving Armageddon, a really easy 20-point machine on HackTheBox that involves the drupalgeddon exploit, reading & cracking a... read more

We will solve Sharp, a 40-point machine on HackTheBox that is all about C-Sharp & .Net. For user, we exploit... read more