Published on: 4/26/2026
A restaurant ordering and reservation system implemented as a forking TCP server. The binary contains three distinct vulnerabilities that must be chained together: an off-by-one null byte overflow for privilege escalation, a format string vulnerability for information leaking, and a buffer overflow for code execution.
Tags: Hack The Box writeup pwn
Published on: 4/25/2026
Windows Server 2019 Domain Controller, Medium difficulty, Season 7.
Tags: Hack The Box lab writeup
Published on: 4/18/2026
Tags: Hack The Box writeup pwn
Published on: 4/18/2026
We turned our assembly tester off because a big mistake from our new C developer. Do you think there are other mistakes he made ?
Tags: Hack The Box pwn writeup
Published on: 4/12/2026
Silentium is an Easy Linux machine featuring a Flowise AI Agent Builder (v3.0.5) and an internal Gogs Git service (v0.13.3). The attack chain involves: 1. **CVE-2025-58434** - Flowise password reset vulnerability to gain admin access 2. **Custom Function RCE** - Using LangChain's TextLoader within Flowise's VM2 sandbox to read sensitive environment variables 3. **CVE-2025-8110** - Gogs symlink path traversal to write an SSH public key to root's authorized_keys
Tags: Hack The Box lab writeup
Published on: 4/12/2026
As is common in real life pentests, you will start the Garfield box with credentials for the following account j.arbuckle / Th1sD4mnC4t!@1978
Tags: Hack The Box lab writeup