HackTheBox Writeups

Silentium Writeup - HackTheBox

Garfield Writeup - HackTheBox

DevArea Writeup - HackTheBox

Kobold Writeup - HackTheBox

VariaType - HackTheBox

PHP type juggling vulnerability exploited via loose comparison to bypass authentication and gain RCE through crafted input manipulation on a Linux web challenge.

CCTV Writeup - HackTheBox

Pirate Writeup - HackTheBox

Hard Windows box involving pirate-themed exploitation chain with privilege escalation techniques targeting Windows services and misconfigurations.

Facts Writeup - HackTheBox

Exploit information disclosure on a Linux web challenge by enumerating exposed endpoints to uncover hidden facts and capture the flag.

WingData Writeup - HackTheBox

Exploiting a Windows machine via exposed data in a web app, leveraging SQL injection and weak credentials to gain a foothold and escalate privileges.

TwoMillion Writeup - HackTheBox

Exploit an invite code API flaw to register, abuse command injection in VPN generation, then leverage CVE-2023-0386 OverlayFS for root escalation.

Soulmate Writeup - HackTheBox

Exploit a Node.js app with SSTI in Handlebars and privilege escalation via a misconfigured SUID binary on an Easy Linux HackTheBox machine.

Pterodactyl Writeup - HackTheBox

Exploit a Pterodactyl game panel via subdomain enumeration, command injection, and privilege escalation to root on this medium Linux box.

Interpreter Writeup - HackTheBox

Reverse engineer a custom bytecode interpreter binary, analyze its instruction set, and craft malicious bytecode to achieve RCE on a Linux target.

Expressway Writeup - HackTheBox

Express.js app vulnerable to prototype pollution via query parameters, leading to RCE through crafted payloads to bypass filters and gain a shell.

Eighteen Writeup - HackTheBox

Exploit a vulnerable web app on a Windows box by discovering hidden endpoints, leveraging SQL injection, and escalating privileges to root via misconfigured services.

Editor Writeup - HackTheBox

Linux box exploiting Overleaf-based file upload vulnerability to gain RCE, then leveraging a misconfigured sudo privilege for root escalation.

Conversor Writeup - HackTheBox

Simple Linux box exploiting a unit converter web app with SSRF to access internal services, leading to credential discovery and privilege escalation.

CodePartTwo Writeup - HackTheBox

Exploit a second-stage code execution challenge on Linux by analyzing decompiled logic, crafting input to bypass checks, and achieving shell access.

Cap Writeup - HackTheBox

IDOR vulnerability exposes PCAP file containing FTP credentials. Lateral movement via SSH, then privilege escalation using Python's cap_setuid capability.

MonitorsFour Writeup - HackTheBox

SQL injection in Cacti leads to RCE, followed by port forwarding and privilege escalation techniques to fully compromise this Windows machine.