Summary Silentium is an Easy Linux box hosting a corporate finance website and a staging Flowise AI platform behind a virtual host. The attack chain exploits three vulnerabilities. Reconnaissance Nmap
Box Info Property Value Name Garfield OS Windows Server 2019 Build 17763 Difficulty Hard Domain garfield.htb DC DC01.garfield.htb (<TARGET_IP> / 192.168.100.1) RODC
Kaizen Labs engineered a pocket-sized RF detector shaped like a compass because the market was flooded with expensive professional gear and useless toys. Here's the honest story of
Box Info Property Value Name DevArea OS Linux (Ubuntu) Difficulty Medium Phase 1: Reconnaissance Port Scan nmap -sV -sC -p- --min-rate 5000 $TARGET Port Service Details 21 FTP vsftpd -
Kobold -- Hack The Box Detailed Writeup Platform: Hack The Box Box Name: Kobold OS: Linux Difficulty: Easy Box Summary Kobold is a Linux easy box featuring a multi-service web
Difficulty: Medium | OS: Linux | Release: 2026 Box Summary VariaType is a Linux medium box set around a font technology startup. Two web applications serve different roles within the company --
Difficulty: Easy OS: Linux Theme: Video surveillance software exploitation chain Overview CCTV is a Linux box themed around IP camera management software. The attack chain involves exploiting two different CCTV
Pirate - Hack The Box Writeup Difficulty: Hard OS: Windows Server 2019 (Active Directory) Author: HTB Key Techniques: Pre-Windows 2000 Machine Accounts, gMSA Password Read, Ligolo-ng Pivoting, RemotePotato0, NTLM Relay
HackTheBox - Interpreter Writeup Machine Info Property Value Name Interpreter OS Linux (Debian 12) Difficulty Medium Target IP 10.129.x.x Reconnaissance Nmap Scan A full TCP port scan
HackTheBox - WingData Machine: WingData Difficulty: Esay Tools Used: Nmap, ffuf, searchsploit, hashcat, Python, sshpass Table of Contents 1. Reconnaissance 2. Foothold - CVE-2025-47812: Wing FTP Lua Injection RCE 3.
HackTheBox: Pterodactyl - Writeup Difficulty: Medium OS: Linux (openSUSE Leap 15.6) Release: Season 10 Table of Contents 1. Reconnaissance 2. Web Enumeration 3. Exploitation - CVE-2025-49132 4. Remote Code
Machine Information Property Value Machine Name Facts Difficulty Easy Operating System Linux (Ubuntu 25.04) Release Date Season 10 Skills Required Web Enumeration, API Testing Skills Learned IDOR Exploitation, S3/
1337sheets Offensive Security Research & Writeups 🔓 We're Looking for Elite Security Authors Join our growing team of cybersecurity researchers and content creators. We need skilled professionals who can
🧠 HTB Write-Up: Haze Difficulty: Hard OS: Linux Points: 30 Date: 2025-04-07 🔍 Reconnaissance 🔎 Nmap Scan Results Command Used: nmap -sV -sC 10.xx.xx.xx -v Target Host: 10.xx.xx.
Difficulty: Hard OS: Windows Points: 40 Date: 2025-04-21 🔍 Reconnaissance 🔎 Nmap Scan I started by running an initial Nmap scan: nmap -sV -sC -v -oN scan 10.xx.xx.xx Results:
