Recent posts

HTB-RE

15 minute read

I liked RE so much, It was one of the best boxes on HTB. It started with a malicious ods file then chaining a WinRAR Path Traversal with…

HTB-Player

14 minute read

Player was fun and realistic box that had sensitive file and source code exposure, exploiting FFMpeg reading arbitrary files vulnerability…

HTB-Bitlab

7 minute read

Although I didn’t like Bitlab user part, I liked its root. There was two ways to get root on that box one from Reversing an executable and…

HTB-Craft

9 minute read

Craft Was a nice realistic medium box That involved Analyzing code that being hosted on Gogs to find missing credentials…