Spectra is an Easy box listed in Hack The Box. It was released on February 27th, 2021 and was designed by egre55. Spectra is a web server with SQL and an SSH server. While this machine was fairly well protected against my wpscan and SQLMap scanning, basic version grabbing and…

Delivery is an Easy box listed on Hack The Box. It was released on January 9th, 2021. Delivery largely focuses on real-world human vulnerabilities around the use of shared accounts and support ticket systems without input validation. …

Toolbox is an Easy machine listed on Hack The Box. It was designed on March 12th, 2021 by MinatoTW. I was able to gain a foothold into Toolbox with a combination of Burpsuite and sqlmap. …

The news stories about cyber attacks are downright hard to ignore. Hospital systems, municipal water, oil pipelines… No part of modern life seems safe from cyber criminals. It then seems inevitable that non-technical users would benefit from some guidelines for good security practices. That is what I aim to do…

Writeup is an Easy box listed on Hack The Box. It was designed by jkr and was originally released on June 8th, 2019. While initial enumeration attempts were complicated by limited Dirbuster search results and an apparent lack of a front-facing website, simple banner grabbing revealed version information that allowed…

Luanne is a retired, easy machine that is listed on Hack The Box. It was first released on November 28th, 2020, and was designed by polarbearer. Gaining an initial foothold into Luanne was somewhat time consuming, but after finding a Lua error, a SQL injection helped establish a shell connection…

Active is an easy, retired machine that is listed on Hack The Box. It was first released on July 28th, 2018, and was designed by eks and mrb3n. …

Traverxec is an easy, retired machine that is listed on Hack The Box. It was first released on November 16th, 2019, and was designed by jkr. While a number of potential pivot points were identified during the recon phase, Searchsploit identified a critical CVE in Nostromo web servers through version…

“Everyone has a plan until they get punched in the mouth" Mike Tyson Have you ever received a notice informing you that your account information has been stolen from a business you have used? …