/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.
You are here

 zwischenzugs.com
Six Ways to Level Up Your nmap Game - zwischenzugs
| | shellsharks.com
HackTheBox: Delivery
2.1 parsecs away

Travel
| | A walkthrough of pwning the HackTheBox machine
| | www.justus.pw
Hack The Box Valentine Writeup - Justus Perlwitz
1.7 parsecs away

Travel
| | [AI summary] The user successfully gained access to a system by exploiting a Heartbleed vulnerability, decrypted an RSA key using a password obtained from memory, and then used that key to log in as the 'hype' user. After enumerating the system, they accessed a Tmux session to gain root access and retrieved the root flag.
| | www.mh4ckt3mh4ckt1c4s.xyz
Operator (Kubernetes and Ansible cloud challenge)
2.9 parsecs away

Travel
| | From HTB Business CTF 2022
| | 0xdf.gitlab.io
HTB: Forest | 0xdf hacks stuff
17.0 parsecs away

Travel
| One of the neat things about HTB is that it exposes Windows concepts unlike any CTF I'd come across before it. Forest is a great example of that. It is a domain controller that allows me to enumerate users over RPC, attack Kerberos with AS-REP Roasting, and use Win-RM to get a shell. Then I can take advantage of the permissions and accesses of that user to get DCSycn capabilities, allowing me to dump hashes for the administrator user and get a shell as the admin. In Beyond Root, I'll look at what DCSync looks like on the wire, and look at the automated task cleaning up permissions.