Welcome to my little page here on Github. Here you'll find writeups for retired Hack the Box machines as well as the occasional TryHackMe room. I'm also an active part of the communities at HTB/THM, under the same alias. If you find anything on here useful, feel free to drop myself (or my team: TargetRoot) respect - it's much appreciated :) My HTB profile, along with a button to follow me on Twitter, are linked below.
Many thanks for stopping by!
Blog Latest:
Happy New Year
March 29, 2021Happy belated new year! I’m currently doing some more work on this after an extended break to handle IRL stuffs! Namely certs and the like; the plan is to now try and flesh this out beyond what currently exists, making the site more streamlined etc.
Newest HTB Writeup:
Delivery [Easy] - Linux
Delivery is an easy Linux machine that uses a some unique/uncommon concepts to root. It starts by having us abuse a single sign-on implementation between 2 web portals and this allows us to gain access to an internal chat group containing some sensitive information. We use that to get a shell before we eventually locate a password hash with a small twist. Let’s take a look at how I did this.
Ready [Medium] - Linux
Ready was a quick and easy box that uses an outdated and vulnerable version of GitLab to allow initial exploitation and shell access to a hosted docker container. From there, root elevation within the container is required so that it’s underlying configration can be abused in order to provide root access to the host machine. Let’s see how I did all that!