Full walkthrough of the HackTheBox Unintended Pro Lab. Six-machine environment compromised via XXE file read exposing internal cre…
Complete walkthrough of the HackTheBox P.O.O. Pro Lab. Five-machine Windows AD environment compromised via IIS web.config.bak cred…
Complete walkthrough of the HackTheBox Puppet Pro Lab. Six-machine Windows/Linux AD environment compromised via WordPress WP File …
Complete walkthrough of the Mythical HackTheBox Mini Pro Lab (FREE). Covers Apache LFI log poisoning via User-Agent injection for …
Complete Mini Pro Lab walkthrough for Intercept on HackTheBox. Covers LLMNR/NBNS poisoning with Responder to capture NetNTLMv2 has…
Complete Mini Pro Lab walkthrough for Reflection on HackTheBox. Covers Server-Side Request Forgery chained with NTLM relay to MSSQ…
Complete Mini Pro Lab walkthrough for Trusted on HackTheBox. Covers ADCS ESC1 (arbitrary SAN certificate abuse), ESC3 (enrollment …
Complete Pro Lab walkthrough for the Dante network on HackTheBox. Covers external initial foothold via WordPress CVE-2020-25213, D…
Full walkthrough of HackTheBox Push Pro Lab — exploiting Gitea open registration, Drone CI pipeline injection, Docker socket conta…