# Benslates

- **URL:** https://hackindex.io/authors/benslates
- **Profiles:** https://github.com/ben-slates, https://discordapp.com/users/855313876983611439

## Writeups

- [Paperwork Writeup - HackTheBox](https://hackindex.io/writeups/paperwork.md): Exploit a Linux machine by abusing misconfigured services and weak credentials to gain initial access, then escalate privileges through vulnerable SUID binaries.
- [Connected Writeup - HackTheBox](https://hackindex.io/writeups/connected.md): Exploit MongoDB misconfiguration with unauthenticated access to enumerate databases and retrieve credentials, ultimately gaining root on an easy Linux box.
- [SmartHire Writeup - HackTheBox](https://hackindex.io/writeups/smarthire.md): SSTI via resume upload, exploiting a Flask/Jinja2 template injection in a smart hiring app to achieve RCE and capture the flag.
- [Helix Writeup - HackTheBox](https://hackindex.io/writeups/helix.md): A writeup covering enumeration, initial access, lateral movement, and privilege escalation through misconfigurations and internal service abuse.
- [PingPong Writeup - HackTheBox](https://hackindex.io/writeups/pingpong.md): Insane Windows box exploiting a ping command injection vulnerability, chaining SSRF and lateral movement techniques to achieve full system compromise.