HackTheBox

// HACKTHEBOX

HackTheBoxHackTheBox

Retired machines, owned and documented.

3

Writeups

All Easy 2 , 2 writeups Medium 1 , 1 writeup

Difficulty 1 of 4 Easy Linux · Standalone

Busqueda

Python command injection in Searchor 2.4.0 for a foothold, then a relative-path hijack in a sudo-run script for root.

Read writeup ->

Difficulty 1 of 4 Easy Windows · Active Directory

Return

LDAP pass-back from a printer admin panel leaks a service account, then a Server Operators service-binary hijack escalates to SYSTEM.

Read writeup ->

Difficulty 2 of 4 Medium Windows · Active Directory

Forest

AS-REP roasting cracks a pre-auth-disabled service account, then an Exchange Windows Permissions WriteDACL over the domain grants DCSync for Administrator.

Read writeup ->