Alohomora (CVE-2021-43857)
Phase 1 — Reconnaissance We begin with a standard Nmap scan to identify open ports and running services on the target. nmap -Pn -sV 172.31.10.251 The scan reveals: Port 21: vsftpd 3.0.5 (FTP...
Pentest Journeys
Docker Group Privilege Escalation - PoC (Docker 1)
1. Target IP: 172.31.33.210 Service: SSH Vulnerability: User in Docker group -> Root filesystem mount 2. Port Discovery Port scan performed to identify open services. seq 10001 ...
HTB - Blackfield
HTB: Blackfield Blackfield Box Walkthrough Summary Step Action Tool Achieved 1 SMB Enumeration NetExec Obtained use...
HTB - Cascade
HTB: Cascade Cascade Box Walkthrough Summary Step Action Tool Achieved 1 SMB Enumeration NetExec Obtained usernames...
HTB - Resolute
HTB: Resolute Resolute Box Walkthrough Summary Step Action Tool Achieved 1 Enumerated SMB server NetExec Obtained u...
HTB - Sauna
HTB: Sauna Sauna Box Walkthrough Summary Step Action Tool Achieved 1 Enumerated web server Nmap, Mozilla Obtained f...
HTB - Active
HTB: Active Active Box Walkthrough Summary Step Action Tool Achieved 1 Enumerated SMB server NetExec, smbclient Obt...
HTB - Forest
HTB: Forest Forest Box Walkthrough Summary Step Action Tool Achieved 1 ASREPRoasting GetNPUsers.py Obtained the TGT...
HTB - Stocker
Overview Stocker is a medium difficulty Linux machine that features a website running on port 80 that advertises various house furniture. Initial foothold: Through vHost enumeration the hostname...
HTB - Inject
Overview Inject is an Easy Difficulty Linux machine featuring a website with file upload functionality vulnerable to Local File Inclusion (LFI). Initial foothold: By exploiting the LFI vulnerabi...