Writeup

In this blog post, I will detail the process through which I successfully gained both user and root access on the HackTheBox machine, ‘Heal’.

In this blog post, I will detail the process through which I successfully gained both user and root access on the HackTheBox machine, ‘UnderPass’.

In this blog post, I will detail the process through which I successfully gained both user and root access on the HackTheBox machine, ‘Administrator’.

In this blog post, I will detail the process through which I successfully gained both user and root access on the HackTheBox machine, ‘LinkVortex’.

In this blog post, I will detail the process through which I successfully gained both user and root access on the HackTheBox machine, ‘Dog’.

In this blog post, I will detail the process through which I successfully gained both user and root access on the HackTheBox machine, ‘Titanic’.

In this box we identify session cookies that are stored in plaintext and are accessible to all users, decompile the Java code to analyze its functionality and leverage GTFOBins to escalate privileges effectively.

Exploiting a website that contains a LaTeX vulnerability. Privilege escalation is possible by a process ran in the background on a specific shell file.

Exploited gRPC service with SQL injection to get SSH access, then escalated to root using a vulnerability in the discovered pyLoad service.

Exploited vulnerable cacti application for initial access, cracked MySQL credentials for SSH, and escalated to root through Docker vulnerability CVE-2021-41091.