. . + .
. __ _o| .
| /__|===-- . <=>
LS [__|______~~--._ . . .
. |\ `---.__:====]-----...,,_____ * . ` -
|[>-----|_______<----------_____;::===--
|/_____.....-----'''~~~~~~~ . .
+ . a technical Security Research blog
- HTB: CozyHosting - Easy
2 Sep '23In this box we identify session cookies that are stored in plaintext and are accessible to all users, decompile the Java code to analyze its …
- HTB: Topology - Easy
10 Jun '23Exploiting a website that contains a LaTeX vulnerability. Privilege escalation is possible by a process ran in the background on a specific shell …
- HTB: PC - Easy
21 May '23Exploited gRPC service with SQL injection to get SSH access, then escalated to root using a vulnerability in the discovered pyLoad service.
- HTB: MonitorsTwo - Easy
29 Apr '23Exploited vulnerable cacti application for initial access, cracked MySQL credentials for SSH, and escalated to root through Docker vulnerability …
- HTB: Inject - Easy
11 Mar '23Exploited image parameter LFI to enumerate system, used Spring Cloud Function vulnerability for initial access, and escalated to root through a …
- HTB: Stocker - Easy
14 Jan '23Exploited NoSQL injection for login bypass, used HTML injection in PDF generation to leak credentials, and escalated to root via sudo NodeJS …