Radosław Żuber

HTB Writeup: FriendZone

Posted on Mon 15 April 2019 in Writeups • Tagged with hack-the-box, writeup, walkthrough

Writeup of 20 points Hack The Box machine - FriendZone. That box was full of rabbitholes :). I won't deny it - I fell for some of them! User flag is accessible due to trivial, yet required some guessing, PHP bug. But only after DNS zone transfer.Root flag was pretty straightforward - required editing python native library. Detailed writeup is available.

	OS	Linux
	Author	askar
	Difficulty	Easy
	Points	20
	Released	09-02-2019
	IP	10.10.10.123

HTB Writeup: Chaos

Posted on Tue 09 April 2019 in Writeups • Tagged with hack-the-box, writeup, walkthrough

Writeup of 30 points Hack The Box machine - Chaos. Fun box with several cunning rabbit holes. Access to user flag require brute-forcing (guessing) simple password and then executing commands via pdfTex. Path to root flag is cleverly hidden in Mozilla Firefox Password Manager. Detailed writeup is available.

	OS	Linux
	Author	felamos
	Difficulty	Medium
	Points	30
	Released	15-12-2018
	IP	10.10.10.120

Reverse shell cheatsheet

Posted on Fri 05 April 2019 in Tutorials • Tagged with tutorial, cheatsheet

Bunch of oneliners for reverse shell. I'll intend to update this page with ordinary and juicy ones.

HTB Writeup: Netmon

Posted on Wed 03 April 2019 in Writeups • Tagged with hack-the-box, writeup, walkthrough

Writeup of 20 points Hack The Box machine - Netmon. The easiest (so far) in the Hack The Box platform. User flag is available via FTP (anonymous access!). Root flag can be read after leveraging PRTG feature (custom actions with notifications) allowing to execute commands. Detailed writeup is available.

	OS	Windows
	Author	mrb3n
	Difficulty	Easy
	Points	20
	Released	02-03-2019
	IP	10.10.10.152

Older Posts