HackTheBox

// HACKTHEBOX

HackTheBox

Retired machines, owned and documented.

0

Writeups

2 easy ·1 medium

All easymedium

Easy ·Linux

Busqueda

Easy Linux

Python command injection in Searchor 2.4.0 for a foothold, then a relative-path hijack in a sudo-run script for root.

Read writeup ->

Easy ·Windows

Return

Easy Windows

LDAP pass-back from a printer admin panel leaks a service account, then a Server Operators service-binary hijack escalates to SYSTEM.

Read writeup ->

Medium ·Windows

Forest

Medium Windows

AS-REP roasting cracks a pre-auth-disabled service account, then an Exchange Windows Permissions WriteDACL over the domain grants DCSync for Administrator.

Read writeup ->