Blog

Thoughts, tutorials, and insights on software, tech and cybersecurity. Feel free to leave a comment!

Filter by topic:

Showing 12 articles

HTB: EscapeTwo

EscapeTwo is a Windows machine that involves exploiting MSSQL, abusing Active Directory permissions, and exploiting a certificate template vulnerability.

May 28, 2025

4 min read

CybersecurityTech+5

ElectronJS - Command and Control via Loki

In this post, I explore Loki C2 - a command and control framework built in NodeJS and targets applications built on ElectronJS

May 9, 2025

9 min read

Casual

eps1.0_hellofriend.mov

Getting started with the blog. A place to share my journey in tech and cybersecurity.

May 2, 2025

2 min read

HTBWriteup+3

HTB: Help

Help is an Easy Linux box which has a GraphQL endpoint which can be enumerated get a set of credentials for a HelpDesk software. The software is vulnerable to blind SQL injection which can be exploited to get a password for SSH Login. Alternatively an unauthenticated arbitrary file upload can be exploited to get RCE. Then the kernel is found to be vulnerable and can be exploited to get a root shell.

June 8, 2019

3 min read

HTBWriteup+4

HTB: Lightweight

Lightweight is a pretty unique and challenging box which showcases the common mistakes made by system administrators and the need for encryption in any kind protocol used. It deals with the abuse of Linux capabilities which can be harmful in bad hands and how unencrypted protocols like LDAP can be sniffed to gain information and credentials.

May 11, 2019

2 min read

HTBWriteup+2

HTB: Irked

Irked is a pretty simple and straight-forward box which requires basic enumeration skills. It shows the need to scan all ports on machines and to investigate any out of the place binaries found while enumerating a system.

April 27, 2019

1 min read

HTBWriteup+3

HTB: Curling

Curling is an Easy difficulty Linux box which requires a fair amount of enumeration. The password is saved in a file on the web root. The username can be download through a post on the CMS which allows a login. Modifying the php template gives a shell. Finding a hex dump and reversing it gives a user shell. On enumerating running processes a cron is discovered which can be exploited for root.

April 22, 2019

3 min read

HTBWriteup+4

HTB: Teacher

Teacher is a medium difficulty machine, which teaches techniques for identifying and exploiting logical flaws and vulnerabilities of outdated modules within popular CMS (in this instance Moodle), enumeration of sensitive information within the backend database and leverage misconfigurations on the operating system, which lead to a complete compromise of a system.

April 22, 2019

3 min read

HTBWriteup+4

HTB: Beep

Beep has a very large list of running services, which can make it a bit challenging to find the correct entry method. This machine can be overwhelming for some as there are many potential attack vectors. Luckily, there are several methods available for gaining access.

March 27, 2019

1 min read

HTBWriteup+4

HTB: October

October is a fairly easy machine to gain an initial foothold on, however it presents a fair challenge for users who have never worked with NX/DEP or ASLR while exploiting buffer overflows.

March 27, 2019

3 min read

HTBWriteup+3

HTB: Lame

Lame is an easy Linux machine, requiring only one exploit to obtain root access. It was the first machine published on Hack The Box and was often the first machine for new users prior to its retirement.

March 25, 2019

1 min read

HTBWriteup+3

HTB: Frolic

Frolic is not overly challenging, however a great deal of enumeration is required due to the amount of services and content running on the machine. The privilege escalation features an easy difficulty return-oriented programming (ROP) exploitation challenge, and is a great learning experience for beginners.

March 23, 2019

4 min read