Published on: 10/6/2024
A simple AD machine can be easily solved by familiarizing yourself with AD enumeration and NTLM Hash cracking and application.
Tags: Hack The Box lab writeup
Published on: 9/15/2024
The official rating for this question is Hard, but I don't think the overall difficulty of this question is Hard! The designer of the question may think that the last step of root privilege requires reading the source code before constructing the exploit and payload, but since the project is too small, there is no need to study the source code in-depth. You can quickly find the problematic areas. I think the difficulty level of this problem is Simple to Medium, and the skills required to solve it are not too complicated, so it's still worth practicing.
Tags: Hack The Box lab writeup
Published on: 9/14/2024
This post is a writeup of the Hack The Box Machine Sightless. Although the difficulty level of this machine is judged to be simple, the content covers a variety of different basic penetration testing techniques, including virtual host enumeration, CVE vulnerability exploitation, password cracking and SSH Tunnel, etc. Those who are familiar with penetration testing should be able to get the user flag easily. The difficulty lies in the final escalation to root, which requires a little bit of thinking out of the penetration test. All in all, Sightless is an informative machine, worth playing.
Tags: Hack The Box lab writeup