Forge is a medium rated box released within the last couple of weeks on the HTB platform. It’s also the target for today! We start off with an nmap to reveal the attack surface. We can see that ftp is present but not available to us and, other than OpenSSH, […]
After hitting a couple of the discrete challenges recently, it was time to get back to full pwnership. This medium rated box was the dish of the day. Where would be without a quick nmap to see the attack surface. Here’s a slightly snipped version of what was returned. Being […]
Who doesn’t enjoy a little reverse engineering? This Hack the Box reversing challenge is listed as ‘Easy’, and wants us to ‘find the password’. Let’s dive in… After unzipping the contents of the challenge we have a single ELF binary called exatlon_v1. It’s one we can’t immediately disassemble either, so […]
Illumination, a 20 point Hack the Box forensics challenge, asks the question “can you find the secret token?”. The back story is that a Junior Developer has just switched to a different source control platform. Theres a ZIP file to download, as with most of these challenges, which when inflated […]
When a Threat Actor is trying to get a payload onto a box they’ll often use curl and wget as they’re often present on the endpoint. If they aren’t – or there’s considerations of being a little more stealthy – there’s another way to live off of the land. It’s […]