Posts by Tag

• ctf 36
• Writeup 33
• Linux 25
• Windows 11
• Web-Enumeration 9
• Web 7
• SQLI 6
• CVE 5
• SSTI 4
• API 3
• Docker 3
• JWT 3
• Pentesting Web 3
• BadPod 2
• Kubernetes 2
• Web-Fuzzing 2
• XXE 2
• Git 2
• Crontab 2
• RPC-Enum 2
• Null-Session 2
• ASREPRoast 2
• MSSQL 2
• Kerberos 2
• SQUID 2
• BruteForce 2
• SMB-Enumeration 2
• RCE 2
• SUID 2
• Capabilities 2
• Deserialization 2
• Web-Enum 2
• Pivoting 2
• Active Directory 2
• Manual Explotation 2
• Information Gathering 2
• Reconnaissance 2
• Exploit Development 2
• certificates 1
• WriteUp 1
• Data Exfiltration 1
• AD 1
• SMB 1
• Virtual_Hosting 1
• Pre_Replace 1
• PIVOTING 1
• Scripting 1
• PasswordLeaked 1
• Account Operators 1
• WriteDacl 1
• git-leak 1
• MicroK8s 1
• Web_Enumeration 1
• NTLMv2 1
• xp_cmdshell 1
• Cached GPP Files 1
• Azure 1
• Group-Abuse 1
• AI 1
• JDWP 1
• PoC 1
• DLL 1
• Potato 1
• Username-Enumeration 1
• LogPoison 1
• SeImpersonatePrivilege 1
• Sudo-Abuse 1
• Grafana 1
• Direcctory-Traversal 1
• Consul-Exploit 1
• MySQL 1
• SQLITE3 1
• ForceChangePassword 1
• LSASS-DUMP 1
• Backup-Operators 1
• TFPT 1
• Suedoedit 1
• Tar 1
• BGP-Hijack 1
• NFS 1
• Web-Shell 1
• Magic-Cookies 1
• X11 1
• NoSQLI 1
• Password-Reuse 1
• GIT 1
• XSS 1
• Open-Redirect 1
• OTP 1
• SMTP 1
• PCAP 1
• Deserialization-Attack 1
• Read-Logs 1
• SCF-File 1
• CA-Certificate 1
• Kerberoasting 1
• DCSync 1
• AppArmor 1
• CouchDB 1
• NoSQL 1
• Data-Exposure 1
• Mongo 1
• WebShell 1
• Moodle 1
• Python-Script 1
• Privesc 1
• Jenkins 1
• Reflected XSS 1

ctf

Builder HTB - WriteUp

April 23, 2024  

WriteUp de la máquina Builder de HTB.

ctf Linux Jenkins CVE Web

GoodGames HTB - WriteUp

March 26, 2023  

WriteUp de la máquina GoodGames de HTB.

ctf Linux Writeup Web-Enum SQLI SSTI Docker Privesc

Teacher HTB - WriteUp

March 17, 2023  

WriteUp de la máquina Teacher de HTB.

ctf Linux Writeup Web-Enum Moodle Python-Script CVE

TheNoteBook HTB - WriteUp

March 16, 2023  

WriteUp de la máquina TheNoteBook de HTB.

ctf Linux Writeup Web JWT WebShell Docker

NodeBlog HTB - WriteUp

March 15, 2023  

WriteUp de la máquina NodeBlog de HTB.

ctf Linux Writeup Web NoSQL XXE Deserialization Data-Exposure Mongo

Canape HTB - WriteUp

March 14, 2023  

WriteUp de la máquina Canape de HTB.

ctf Linux Writeup Web Git Deserialization CouchDB

Nunchucks HTB - WriteUp

March 13, 2023  

WriteUp de la máquina Nunchucks de HTB.

ctf Linux Writeup Web-Enumeration SSTI Capabilities AppArmor

Sizzle HTB - WriteUp

March 12, 2023  

WriteUp de la máquina Sizzle de HTB.

ctf Windows Writeup SMB-Enumeration SCF-File Web-Enumeration CA-Certificate Kerberoasting DCSync

Backend HTB - WriteUp

March 09, 2023  

WriteUp de la máquina Backend de HTB.

ctf Linux Writeup Web-Enumeration Web-Fuzzing API Read-Logs

Celestial HTB - WriteUp

March 08, 2023  

WriteUp de la máquina Celestial de HTB.

ctf Linux Writeup Web-Enumeration Deserialization-Attack Crontab

Cap HTB - WriteUp

March 07, 2023  

WriteUp de la máquina Cap de HTB.

ctf Linux Writeup Web-Enumeration PCAP Capabilities

WebHackingPlayground - WriteUp

March 06, 2023  

WriteUp de WebHackingPlayground creado por Takito.

ctf Web Writeup JWT XSS Open-Redirect OTP SSTI SMTP

Secret HTB - WriteUp

March 05, 2023  

WriteUp de la máquina Secret de HTB.

ctf Linux Writeup Web-Enumeration API JWT GIT RCE SUID

Mango HTB - WriteUp

March 04, 2023  

WriteUp de la máquina Mango de HTB.

ctf Linux Writeup Web-Enumeration NoSQLI Password-Reuse SUID

Squashed HTB - WriteUp

March 03, 2023  

WriteUp de la máquina Squashed de HTB.

ctf Linux Writeup NFS Web-Shell Magic-Cookies X11

Carrier HTB - WriteUp

March 03, 2023  

WriteUp de la máquina Carrier de HTB.

ctf Linux Writeup Web-Enumeration RCE BGP-Hijack

Joker HTB - WriteUp

March 02, 2023  

WriteUp de la máquina Joker de HTB.

ctf Linux Writeup SQUID TFPT Web-Enumeration Suedoedit Tar

Blackfield HTB - WriteUp

March 01, 2023  

WriteUp de la máquina Blackfield de HTB.

ctf Windows Writeup SMB-Enumeration ASREPRoast ForceChangePassword LSASS-DUMP Backup-Operators

Ambassador HTB - WriteUp

March 01, 2023  

WriteUp de la máquina Ambassador de HTB.

ctf Linux Writeup Grafana Direcctory-Traversal Consul-Exploit MySQL SQLITE3

Knife HTB - WriteUp

February 28, 2023  

WriteUp de la máquina Knife de HTB.

ctf Linux Writeup Web CVE Sudo-Abuse

Bart HTB - WriteUp

February 28, 2023  

WriteUp de la máquina Bart de HTB.

ctf Windows Writeup Web Username-Enumeration BruteForce LogPoison SeImpersonatePrivilege

AI HTB - WriteUp

February 27, 2023  

WriteUp de la máquina AI de HTB.

ctf Linux Writeup AI SQLI JDWP

Monteverde HTB - WriteUp

February 26, 2023  

WriteUp de la máquina Monteverde de HTB.

ctf Windows Writeup RPC-Enum Null-Session BruteForce Azure Group-Abuse

Querier HTB - WriteUp

February 23, 2023  

WriteUp de la máquina Querier de HTB.

ctf Windows Writeup MSSQL NTLMv2 xp_cmdshell Cached GPP Files

Tentacle HTB - WriteUp

February 22, 2023  

WriteUp de la máquina Tentacle de HTB.

ctf Linux Writeup SQUID CVE Kerberos

Mantis HTB - WriteUp

February 22, 2023  

WriteUp de la máquina Mantis de HTB.

ctf Windows Writeup Web_Enumeration MSSQL Kerberos

Frank & Herby THM - WriteUp

February 22, 2023  

WriteUp de la máquina Frank & Herby de THM.

ctf BadPod Writeup git-leak MicroK8s Kubernetes

Forest HTB - WriteUp

February 20, 2023  

WriteUp de la máquina Forest de HTB.

ctf Windows Writeup RPC-Enum Null-Session ASREPRoast Account Operators WriteDacl

Validation HTB - WriteUp

February 20, 2023  

WriteUp de la máquina Validation de HTB.

ctf Linux Writeup SQLI Scripting PasswordLeaked

Oz HTB - WriteUp

February 20, 2023  

WriteUp de la máquina Oz de HTB.

ctf Linux Writeup Docker SSTI PIVOTING SQLI

Europa HTB - WriteUp

February 19, 2023  

WriteUp de la máquina Europa de HTB.

ctf Linux Writeup Virtual_Hosting SQLI Pre_Replace Crontab

DevOops HTB - WriteUp

February 19, 2023  

WriteUp de la máquina DevOops de HTB.

ctf Linux Writeup Web-Fuzzing XXE Git

Active HTB - WriteUp

February 18, 2023  

WriteUp de la máquina Active de HTB.

ctf Windows Writeup AD SMB

SteamCloud HTB - WriteUp

February 16, 2023  

WriteUp de la máquina SteamCloud de HTB.

ctf BadPod Writeup API Kubernetes

DarkHole:2 - WriteUp

January 24, 2023  

WriteUp de la máquina DarkHole:2 de Vulnhub.

ctf WriteUp SQLI Data Exfiltration

eWPT - Review

January 12, 2023  

Esto es una review de la certificación de Elearn Security, donde os cuento mi experiencia.

ctf certificates

Back to Top ↑

Writeup

GoodGames HTB - WriteUp

March 26, 2023  

WriteUp de la máquina GoodGames de HTB.

ctf Linux Writeup Web-Enum SQLI SSTI Docker Privesc

Teacher HTB - WriteUp

March 17, 2023  

WriteUp de la máquina Teacher de HTB.

ctf Linux Writeup Web-Enum Moodle Python-Script CVE

TheNoteBook HTB - WriteUp

March 16, 2023  

WriteUp de la máquina TheNoteBook de HTB.

ctf Linux Writeup Web JWT WebShell Docker

NodeBlog HTB - WriteUp

March 15, 2023  

WriteUp de la máquina NodeBlog de HTB.

ctf Linux Writeup Web NoSQL XXE Deserialization Data-Exposure Mongo

Canape HTB - WriteUp

March 14, 2023  

WriteUp de la máquina Canape de HTB.

ctf Linux Writeup Web Git Deserialization CouchDB

Nunchucks HTB - WriteUp

March 13, 2023  

WriteUp de la máquina Nunchucks de HTB.

ctf Linux Writeup Web-Enumeration SSTI Capabilities AppArmor

Sizzle HTB - WriteUp

March 12, 2023  

WriteUp de la máquina Sizzle de HTB.

ctf Windows Writeup SMB-Enumeration SCF-File Web-Enumeration CA-Certificate Kerberoasting DCSync

Backend HTB - WriteUp

March 09, 2023  

WriteUp de la máquina Backend de HTB.

ctf Linux Writeup Web-Enumeration Web-Fuzzing API Read-Logs

Celestial HTB - WriteUp

March 08, 2023  

WriteUp de la máquina Celestial de HTB.

ctf Linux Writeup Web-Enumeration Deserialization-Attack Crontab

Cap HTB - WriteUp

March 07, 2023  

WriteUp de la máquina Cap de HTB.

ctf Linux Writeup Web-Enumeration PCAP Capabilities

WebHackingPlayground - WriteUp

March 06, 2023  

WriteUp de WebHackingPlayground creado por Takito.

ctf Web Writeup JWT XSS Open-Redirect OTP SSTI SMTP

Secret HTB - WriteUp

March 05, 2023  

WriteUp de la máquina Secret de HTB.

ctf Linux Writeup Web-Enumeration API JWT GIT RCE SUID

Mango HTB - WriteUp

March 04, 2023  

WriteUp de la máquina Mango de HTB.

ctf Linux Writeup Web-Enumeration NoSQLI Password-Reuse SUID

Squashed HTB - WriteUp

March 03, 2023  

WriteUp de la máquina Squashed de HTB.

ctf Linux Writeup NFS Web-Shell Magic-Cookies X11

Carrier HTB - WriteUp

March 03, 2023  

WriteUp de la máquina Carrier de HTB.

ctf Linux Writeup Web-Enumeration RCE BGP-Hijack

Joker HTB - WriteUp

March 02, 2023  

WriteUp de la máquina Joker de HTB.

ctf Linux Writeup SQUID TFPT Web-Enumeration Suedoedit Tar

Blackfield HTB - WriteUp

March 01, 2023  

WriteUp de la máquina Blackfield de HTB.

ctf Windows Writeup SMB-Enumeration ASREPRoast ForceChangePassword LSASS-DUMP Backup-Operators

Ambassador HTB - WriteUp

March 01, 2023  

WriteUp de la máquina Ambassador de HTB.

ctf Linux Writeup Grafana Direcctory-Traversal Consul-Exploit MySQL SQLITE3

Knife HTB - WriteUp

February 28, 2023  

WriteUp de la máquina Knife de HTB.

ctf Linux Writeup Web CVE Sudo-Abuse

Bart HTB - WriteUp

February 28, 2023  

WriteUp de la máquina Bart de HTB.

ctf Windows Writeup Web Username-Enumeration BruteForce LogPoison SeImpersonatePrivilege

AI HTB - WriteUp

February 27, 2023  

WriteUp de la máquina AI de HTB.

ctf Linux Writeup AI SQLI JDWP

Monteverde HTB - WriteUp

February 26, 2023  

WriteUp de la máquina Monteverde de HTB.

ctf Windows Writeup RPC-Enum Null-Session BruteForce Azure Group-Abuse

Querier HTB - WriteUp

February 23, 2023  

WriteUp de la máquina Querier de HTB.

ctf Windows Writeup MSSQL NTLMv2 xp_cmdshell Cached GPP Files

Tentacle HTB - WriteUp

February 22, 2023  

WriteUp de la máquina Tentacle de HTB.

ctf Linux Writeup SQUID CVE Kerberos

Mantis HTB - WriteUp

February 22, 2023  

WriteUp de la máquina Mantis de HTB.

ctf Windows Writeup Web_Enumeration MSSQL Kerberos

Frank & Herby THM - WriteUp

February 22, 2023  

WriteUp de la máquina Frank & Herby de THM.

ctf BadPod Writeup git-leak MicroK8s Kubernetes

Forest HTB - WriteUp

February 20, 2023  

WriteUp de la máquina Forest de HTB.

ctf Windows Writeup RPC-Enum Null-Session ASREPRoast Account Operators WriteDacl

Validation HTB - WriteUp

February 20, 2023  

WriteUp de la máquina Validation de HTB.

ctf Linux Writeup SQLI Scripting PasswordLeaked

Oz HTB - WriteUp

February 20, 2023  

WriteUp de la máquina Oz de HTB.

ctf Linux Writeup Docker SSTI PIVOTING SQLI

Europa HTB - WriteUp

February 19, 2023  

WriteUp de la máquina Europa de HTB.

ctf Linux Writeup Virtual_Hosting SQLI Pre_Replace Crontab

DevOops HTB - WriteUp

February 19, 2023  

WriteUp de la máquina DevOops de HTB.

ctf Linux Writeup Web-Fuzzing XXE Git

Active HTB - WriteUp

February 18, 2023  

WriteUp de la máquina Active de HTB.

ctf Windows Writeup AD SMB

SteamCloud HTB - WriteUp

February 16, 2023  

WriteUp de la máquina SteamCloud de HTB.

ctf BadPod Writeup API Kubernetes

Back to Top ↑

Linux

Review[ES] - eCPPTv3

July 04, 2024  

Información, tips, cosas negativas y positivas sobre el eCPPTv3

Pivoting Linux Windows Active Directory Manual Explotation Information Gathering Reconnaissance Exploit Development Pentesting Web

Review[EN] - eCPPTv3

July 04, 2024  

Information, tips, negative and positive things about eCPPTv3

Pivoting Linux Windows Active Directory Manual Explotation Information Gathering Reconnaissance Exploit Development Pentesting Web

Builder HTB - WriteUp

April 23, 2024  

WriteUp de la máquina Builder de HTB.

ctf Linux Jenkins CVE Web

GoodGames HTB - WriteUp

March 26, 2023  

WriteUp de la máquina GoodGames de HTB.

ctf Linux Writeup Web-Enum SQLI SSTI Docker Privesc

Teacher HTB - WriteUp

March 17, 2023  

WriteUp de la máquina Teacher de HTB.

ctf Linux Writeup Web-Enum Moodle Python-Script CVE

TheNoteBook HTB - WriteUp

March 16, 2023  

WriteUp de la máquina TheNoteBook de HTB.

ctf Linux Writeup Web JWT WebShell Docker

NodeBlog HTB - WriteUp

March 15, 2023  

WriteUp de la máquina NodeBlog de HTB.

ctf Linux Writeup Web NoSQL XXE Deserialization Data-Exposure Mongo

Canape HTB - WriteUp

March 14, 2023  

WriteUp de la máquina Canape de HTB.

ctf Linux Writeup Web Git Deserialization CouchDB

Nunchucks HTB - WriteUp

March 13, 2023  

WriteUp de la máquina Nunchucks de HTB.

ctf Linux Writeup Web-Enumeration SSTI Capabilities AppArmor

Backend HTB - WriteUp

March 09, 2023  

WriteUp de la máquina Backend de HTB.

ctf Linux Writeup Web-Enumeration Web-Fuzzing API Read-Logs

Celestial HTB - WriteUp

March 08, 2023  

WriteUp de la máquina Celestial de HTB.

ctf Linux Writeup Web-Enumeration Deserialization-Attack Crontab

Cap HTB - WriteUp

March 07, 2023  

WriteUp de la máquina Cap de HTB.

ctf Linux Writeup Web-Enumeration PCAP Capabilities

Secret HTB - WriteUp

March 05, 2023  

WriteUp de la máquina Secret de HTB.

ctf Linux Writeup Web-Enumeration API JWT GIT RCE SUID

Mango HTB - WriteUp

March 04, 2023  

WriteUp de la máquina Mango de HTB.

ctf Linux Writeup Web-Enumeration NoSQLI Password-Reuse SUID

Squashed HTB - WriteUp

March 03, 2023  

WriteUp de la máquina Squashed de HTB.

ctf Linux Writeup NFS Web-Shell Magic-Cookies X11

Carrier HTB - WriteUp

March 03, 2023  

WriteUp de la máquina Carrier de HTB.

ctf Linux Writeup Web-Enumeration RCE BGP-Hijack

Joker HTB - WriteUp

March 02, 2023  

WriteUp de la máquina Joker de HTB.

ctf Linux Writeup SQUID TFPT Web-Enumeration Suedoedit Tar

Ambassador HTB - WriteUp

March 01, 2023  

WriteUp de la máquina Ambassador de HTB.

ctf Linux Writeup Grafana Direcctory-Traversal Consul-Exploit MySQL SQLITE3

Knife HTB - WriteUp

February 28, 2023  

WriteUp de la máquina Knife de HTB.

ctf Linux Writeup Web CVE Sudo-Abuse

AI HTB - WriteUp

February 27, 2023  

WriteUp de la máquina AI de HTB.

ctf Linux Writeup AI SQLI JDWP

Tentacle HTB - WriteUp

February 22, 2023  

WriteUp de la máquina Tentacle de HTB.

ctf Linux Writeup SQUID CVE Kerberos

Validation HTB - WriteUp

February 20, 2023  

WriteUp de la máquina Validation de HTB.

ctf Linux Writeup SQLI Scripting PasswordLeaked

Oz HTB - WriteUp

February 20, 2023  

WriteUp de la máquina Oz de HTB.

ctf Linux Writeup Docker SSTI PIVOTING SQLI

Europa HTB - WriteUp

February 19, 2023  

WriteUp de la máquina Europa de HTB.

ctf Linux Writeup Virtual_Hosting SQLI Pre_Replace Crontab

DevOops HTB - WriteUp

February 19, 2023  

WriteUp de la máquina DevOops de HTB.

ctf Linux Writeup Web-Fuzzing XXE Git

Back to Top ↑

Windows

Review[ES] - eCPPTv3

July 04, 2024  

Información, tips, cosas negativas y positivas sobre el eCPPTv3

Pivoting Linux Windows Active Directory Manual Explotation Information Gathering Reconnaissance Exploit Development Pentesting Web

Review[EN] - eCPPTv3

July 04, 2024  

Information, tips, negative and positive things about eCPPTv3

Pivoting Linux Windows Active Directory Manual Explotation Information Gathering Reconnaissance Exploit Development Pentesting Web

Sizzle HTB - WriteUp

March 12, 2023  

WriteUp de la máquina Sizzle de HTB.

ctf Windows Writeup SMB-Enumeration SCF-File Web-Enumeration CA-Certificate Kerberoasting DCSync

Blackfield HTB - WriteUp

March 01, 2023  

WriteUp de la máquina Blackfield de HTB.

ctf Windows Writeup SMB-Enumeration ASREPRoast ForceChangePassword LSASS-DUMP Backup-Operators

Bart HTB - WriteUp

February 28, 2023  

WriteUp de la máquina Bart de HTB.

ctf Windows Writeup Web Username-Enumeration BruteForce LogPoison SeImpersonatePrivilege

LocalPotato-CVE-2023-21746

February 27, 2023  

Explotando el PoC de LocalPotato-CVE-2023-21746.

PoC Windows CVE DLL Potato

Monteverde HTB - WriteUp

February 26, 2023  

WriteUp de la máquina Monteverde de HTB.

ctf Windows Writeup RPC-Enum Null-Session BruteForce Azure Group-Abuse

Querier HTB - WriteUp

February 23, 2023  

WriteUp de la máquina Querier de HTB.

ctf Windows Writeup MSSQL NTLMv2 xp_cmdshell Cached GPP Files

Mantis HTB - WriteUp

February 22, 2023  

WriteUp de la máquina Mantis de HTB.

ctf Windows Writeup Web_Enumeration MSSQL Kerberos

Forest HTB - WriteUp

February 20, 2023  

WriteUp de la máquina Forest de HTB.

ctf Windows Writeup RPC-Enum Null-Session ASREPRoast Account Operators WriteDacl

Active HTB - WriteUp

February 18, 2023  

WriteUp de la máquina Active de HTB.

ctf Windows Writeup AD SMB

Back to Top ↑

Web-Enumeration

Nunchucks HTB - WriteUp

March 13, 2023  

WriteUp de la máquina Nunchucks de HTB.

ctf Linux Writeup Web-Enumeration SSTI Capabilities AppArmor

Sizzle HTB - WriteUp

March 12, 2023  

WriteUp de la máquina Sizzle de HTB.

ctf Windows Writeup SMB-Enumeration SCF-File Web-Enumeration CA-Certificate Kerberoasting DCSync

Backend HTB - WriteUp

March 09, 2023  

WriteUp de la máquina Backend de HTB.

ctf Linux Writeup Web-Enumeration Web-Fuzzing API Read-Logs

Celestial HTB - WriteUp

March 08, 2023  

WriteUp de la máquina Celestial de HTB.

ctf Linux Writeup Web-Enumeration Deserialization-Attack Crontab

Cap HTB - WriteUp

March 07, 2023  

WriteUp de la máquina Cap de HTB.

ctf Linux Writeup Web-Enumeration PCAP Capabilities

Secret HTB - WriteUp

March 05, 2023  

WriteUp de la máquina Secret de HTB.

ctf Linux Writeup Web-Enumeration API JWT GIT RCE SUID

Mango HTB - WriteUp

March 04, 2023  

WriteUp de la máquina Mango de HTB.

ctf Linux Writeup Web-Enumeration NoSQLI Password-Reuse SUID

Carrier HTB - WriteUp

March 03, 2023  

WriteUp de la máquina Carrier de HTB.

ctf Linux Writeup Web-Enumeration RCE BGP-Hijack

Joker HTB - WriteUp

March 02, 2023  

WriteUp de la máquina Joker de HTB.

ctf Linux Writeup SQUID TFPT Web-Enumeration Suedoedit Tar

Back to Top ↑

Web

Builder HTB - WriteUp

April 23, 2024  

WriteUp de la máquina Builder de HTB.

ctf Linux Jenkins CVE Web

TheNoteBook HTB - WriteUp

March 16, 2023  

WriteUp de la máquina TheNoteBook de HTB.

ctf Linux Writeup Web JWT WebShell Docker

NodeBlog HTB - WriteUp

March 15, 2023  

WriteUp de la máquina NodeBlog de HTB.

ctf Linux Writeup Web NoSQL XXE Deserialization Data-Exposure Mongo

Canape HTB - WriteUp

March 14, 2023  

WriteUp de la máquina Canape de HTB.

ctf Linux Writeup Web Git Deserialization CouchDB

WebHackingPlayground - WriteUp

March 06, 2023  

WriteUp de WebHackingPlayground creado por Takito.

ctf Web Writeup JWT XSS Open-Redirect OTP SSTI SMTP

Knife HTB - WriteUp

February 28, 2023  

WriteUp de la máquina Knife de HTB.

ctf Linux Writeup Web CVE Sudo-Abuse

Bart HTB - WriteUp

February 28, 2023  

WriteUp de la máquina Bart de HTB.

ctf Windows Writeup Web Username-Enumeration BruteForce LogPoison SeImpersonatePrivilege

Back to Top ↑

SQLI

GoodGames HTB - WriteUp

March 26, 2023  

WriteUp de la máquina GoodGames de HTB.

ctf Linux Writeup Web-Enum SQLI SSTI Docker Privesc

AI HTB - WriteUp

February 27, 2023  

WriteUp de la máquina AI de HTB.

ctf Linux Writeup AI SQLI JDWP

Validation HTB - WriteUp

February 20, 2023  

WriteUp de la máquina Validation de HTB.

ctf Linux Writeup SQLI Scripting PasswordLeaked

Oz HTB - WriteUp

February 20, 2023  

WriteUp de la máquina Oz de HTB.

ctf Linux Writeup Docker SSTI PIVOTING SQLI

Europa HTB - WriteUp

February 19, 2023  

WriteUp de la máquina Europa de HTB.

ctf Linux Writeup Virtual_Hosting SQLI Pre_Replace Crontab

DarkHole:2 - WriteUp

January 24, 2023  

WriteUp de la máquina DarkHole:2 de Vulnhub.

ctf WriteUp SQLI Data Exfiltration

Back to Top ↑

CVE

Builder HTB - WriteUp

April 23, 2024  

WriteUp de la máquina Builder de HTB.

ctf Linux Jenkins CVE Web

Teacher HTB - WriteUp

March 17, 2023  

WriteUp de la máquina Teacher de HTB.

ctf Linux Writeup Web-Enum Moodle Python-Script CVE

Knife HTB - WriteUp

February 28, 2023  

WriteUp de la máquina Knife de HTB.

ctf Linux Writeup Web CVE Sudo-Abuse

LocalPotato-CVE-2023-21746

February 27, 2023  

Explotando el PoC de LocalPotato-CVE-2023-21746.

PoC Windows CVE DLL Potato

Tentacle HTB - WriteUp

February 22, 2023  

WriteUp de la máquina Tentacle de HTB.

ctf Linux Writeup SQUID CVE Kerberos

Back to Top ↑

SSTI

GoodGames HTB - WriteUp

March 26, 2023  

WriteUp de la máquina GoodGames de HTB.

ctf Linux Writeup Web-Enum SQLI SSTI Docker Privesc

Nunchucks HTB - WriteUp

March 13, 2023  

WriteUp de la máquina Nunchucks de HTB.

ctf Linux Writeup Web-Enumeration SSTI Capabilities AppArmor

WebHackingPlayground - WriteUp

March 06, 2023  

WriteUp de WebHackingPlayground creado por Takito.

ctf Web Writeup JWT XSS Open-Redirect OTP SSTI SMTP

Oz HTB - WriteUp

February 20, 2023  

WriteUp de la máquina Oz de HTB.

ctf Linux Writeup Docker SSTI PIVOTING SQLI

Back to Top ↑

API

Backend HTB - WriteUp

March 09, 2023  

WriteUp de la máquina Backend de HTB.

ctf Linux Writeup Web-Enumeration Web-Fuzzing API Read-Logs

Secret HTB - WriteUp

March 05, 2023  

WriteUp de la máquina Secret de HTB.

ctf Linux Writeup Web-Enumeration API JWT GIT RCE SUID

SteamCloud HTB - WriteUp

February 16, 2023  

WriteUp de la máquina SteamCloud de HTB.

ctf BadPod Writeup API Kubernetes

Back to Top ↑

Docker

GoodGames HTB - WriteUp

March 26, 2023  

WriteUp de la máquina GoodGames de HTB.

ctf Linux Writeup Web-Enum SQLI SSTI Docker Privesc

TheNoteBook HTB - WriteUp

March 16, 2023  

WriteUp de la máquina TheNoteBook de HTB.

ctf Linux Writeup Web JWT WebShell Docker

Oz HTB - WriteUp

February 20, 2023  

WriteUp de la máquina Oz de HTB.

ctf Linux Writeup Docker SSTI PIVOTING SQLI

Back to Top ↑

JWT

TheNoteBook HTB - WriteUp

March 16, 2023  

WriteUp de la máquina TheNoteBook de HTB.

ctf Linux Writeup Web JWT WebShell Docker

WebHackingPlayground - WriteUp

March 06, 2023  

WriteUp de WebHackingPlayground creado por Takito.

ctf Web Writeup JWT XSS Open-Redirect OTP SSTI SMTP

Secret HTB - WriteUp

March 05, 2023  

WriteUp de la máquina Secret de HTB.

ctf Linux Writeup Web-Enumeration API JWT GIT RCE SUID

Back to Top ↑

Pentesting Web

Vulnerabilidad XSS Reflejada Encontrada en el Sitio Web de la Agencia Tributaria

September 04, 2024  

Informe de Vulnerabilidad XSS en la Web de la Agencia Tributaria

Pentesting Web Reflected XSS

Review[ES] - eCPPTv3

July 04, 2024  

Información, tips, cosas negativas y positivas sobre el eCPPTv3

Pivoting Linux Windows Active Directory Manual Explotation Information Gathering Reconnaissance Exploit Development Pentesting Web

Review[EN] - eCPPTv3

July 04, 2024  

Information, tips, negative and positive things about eCPPTv3

Pivoting Linux Windows Active Directory Manual Explotation Information Gathering Reconnaissance Exploit Development Pentesting Web

Back to Top ↑

BadPod

Frank & Herby THM - WriteUp

February 22, 2023  

WriteUp de la máquina Frank & Herby de THM.

ctf BadPod Writeup git-leak MicroK8s Kubernetes

SteamCloud HTB - WriteUp

February 16, 2023  

WriteUp de la máquina SteamCloud de HTB.

ctf BadPod Writeup API Kubernetes

Back to Top ↑

Kubernetes

Frank & Herby THM - WriteUp

February 22, 2023  

WriteUp de la máquina Frank & Herby de THM.

ctf BadPod Writeup git-leak MicroK8s Kubernetes

SteamCloud HTB - WriteUp

February 16, 2023  

WriteUp de la máquina SteamCloud de HTB.

ctf BadPod Writeup API Kubernetes

Back to Top ↑

Web-Fuzzing

Backend HTB - WriteUp

March 09, 2023  

WriteUp de la máquina Backend de HTB.

ctf Linux Writeup Web-Enumeration Web-Fuzzing API Read-Logs

DevOops HTB - WriteUp

February 19, 2023  

WriteUp de la máquina DevOops de HTB.

ctf Linux Writeup Web-Fuzzing XXE Git

Back to Top ↑

XXE

NodeBlog HTB - WriteUp

March 15, 2023  

WriteUp de la máquina NodeBlog de HTB.

ctf Linux Writeup Web NoSQL XXE Deserialization Data-Exposure Mongo

DevOops HTB - WriteUp

February 19, 2023  

WriteUp de la máquina DevOops de HTB.

ctf Linux Writeup Web-Fuzzing XXE Git

Back to Top ↑

Git

Canape HTB - WriteUp

March 14, 2023  

WriteUp de la máquina Canape de HTB.

ctf Linux Writeup Web Git Deserialization CouchDB

DevOops HTB - WriteUp

February 19, 2023  

WriteUp de la máquina DevOops de HTB.

ctf Linux Writeup Web-Fuzzing XXE Git

Back to Top ↑

Crontab

Celestial HTB - WriteUp

March 08, 2023  

WriteUp de la máquina Celestial de HTB.

ctf Linux Writeup Web-Enumeration Deserialization-Attack Crontab

Europa HTB - WriteUp

February 19, 2023  

WriteUp de la máquina Europa de HTB.

ctf Linux Writeup Virtual_Hosting SQLI Pre_Replace Crontab

Back to Top ↑

RPC-Enum

Monteverde HTB - WriteUp

February 26, 2023  

WriteUp de la máquina Monteverde de HTB.

ctf Windows Writeup RPC-Enum Null-Session BruteForce Azure Group-Abuse

Forest HTB - WriteUp

February 20, 2023  

WriteUp de la máquina Forest de HTB.

ctf Windows Writeup RPC-Enum Null-Session ASREPRoast Account Operators WriteDacl

Back to Top ↑

Null-Session

Monteverde HTB - WriteUp

February 26, 2023  

WriteUp de la máquina Monteverde de HTB.

ctf Windows Writeup RPC-Enum Null-Session BruteForce Azure Group-Abuse

Forest HTB - WriteUp

February 20, 2023  

WriteUp de la máquina Forest de HTB.

ctf Windows Writeup RPC-Enum Null-Session ASREPRoast Account Operators WriteDacl

Back to Top ↑

ASREPRoast

Blackfield HTB - WriteUp

March 01, 2023  

WriteUp de la máquina Blackfield de HTB.

ctf Windows Writeup SMB-Enumeration ASREPRoast ForceChangePassword LSASS-DUMP Backup-Operators

Forest HTB - WriteUp

February 20, 2023  

WriteUp de la máquina Forest de HTB.

ctf Windows Writeup RPC-Enum Null-Session ASREPRoast Account Operators WriteDacl

Back to Top ↑

MSSQL

Querier HTB - WriteUp

February 23, 2023  

WriteUp de la máquina Querier de HTB.

ctf Windows Writeup MSSQL NTLMv2 xp_cmdshell Cached GPP Files

Mantis HTB - WriteUp

February 22, 2023  

WriteUp de la máquina Mantis de HTB.

ctf Windows Writeup Web_Enumeration MSSQL Kerberos

Back to Top ↑

Kerberos

Tentacle HTB - WriteUp

February 22, 2023  

WriteUp de la máquina Tentacle de HTB.

ctf Linux Writeup SQUID CVE Kerberos

Mantis HTB - WriteUp

February 22, 2023  

WriteUp de la máquina Mantis de HTB.

ctf Windows Writeup Web_Enumeration MSSQL Kerberos

Back to Top ↑

SQUID

Joker HTB - WriteUp

March 02, 2023  

WriteUp de la máquina Joker de HTB.

ctf Linux Writeup SQUID TFPT Web-Enumeration Suedoedit Tar

Tentacle HTB - WriteUp

February 22, 2023  

WriteUp de la máquina Tentacle de HTB.

ctf Linux Writeup SQUID CVE Kerberos

Back to Top ↑

BruteForce

Bart HTB - WriteUp

February 28, 2023  

WriteUp de la máquina Bart de HTB.

ctf Windows Writeup Web Username-Enumeration BruteForce LogPoison SeImpersonatePrivilege

Monteverde HTB - WriteUp

February 26, 2023  

WriteUp de la máquina Monteverde de HTB.

ctf Windows Writeup RPC-Enum Null-Session BruteForce Azure Group-Abuse

Back to Top ↑

SMB-Enumeration

Sizzle HTB - WriteUp

March 12, 2023  

WriteUp de la máquina Sizzle de HTB.

ctf Windows Writeup SMB-Enumeration SCF-File Web-Enumeration CA-Certificate Kerberoasting DCSync

Blackfield HTB - WriteUp

March 01, 2023  

WriteUp de la máquina Blackfield de HTB.

ctf Windows Writeup SMB-Enumeration ASREPRoast ForceChangePassword LSASS-DUMP Backup-Operators

Back to Top ↑

RCE

Secret HTB - WriteUp

March 05, 2023  

WriteUp de la máquina Secret de HTB.

ctf Linux Writeup Web-Enumeration API JWT GIT RCE SUID

Carrier HTB - WriteUp

March 03, 2023  

WriteUp de la máquina Carrier de HTB.

ctf Linux Writeup Web-Enumeration RCE BGP-Hijack

Back to Top ↑

SUID

Secret HTB - WriteUp

March 05, 2023  

WriteUp de la máquina Secret de HTB.

ctf Linux Writeup Web-Enumeration API JWT GIT RCE SUID

Mango HTB - WriteUp

March 04, 2023  

WriteUp de la máquina Mango de HTB.

ctf Linux Writeup Web-Enumeration NoSQLI Password-Reuse SUID

Back to Top ↑

Capabilities

Nunchucks HTB - WriteUp

March 13, 2023  

WriteUp de la máquina Nunchucks de HTB.

ctf Linux Writeup Web-Enumeration SSTI Capabilities AppArmor

Cap HTB - WriteUp

March 07, 2023  

WriteUp de la máquina Cap de HTB.

ctf Linux Writeup Web-Enumeration PCAP Capabilities

Back to Top ↑

Deserialization

NodeBlog HTB - WriteUp

March 15, 2023  

WriteUp de la máquina NodeBlog de HTB.

ctf Linux Writeup Web NoSQL XXE Deserialization Data-Exposure Mongo

Canape HTB - WriteUp

March 14, 2023  

WriteUp de la máquina Canape de HTB.

ctf Linux Writeup Web Git Deserialization CouchDB

Back to Top ↑

Web-Enum

GoodGames HTB - WriteUp

March 26, 2023  

WriteUp de la máquina GoodGames de HTB.

ctf Linux Writeup Web-Enum SQLI SSTI Docker Privesc

Teacher HTB - WriteUp

March 17, 2023  

WriteUp de la máquina Teacher de HTB.

ctf Linux Writeup Web-Enum Moodle Python-Script CVE

Back to Top ↑

Pivoting

Review[ES] - eCPPTv3

July 04, 2024  

Información, tips, cosas negativas y positivas sobre el eCPPTv3

Pivoting Linux Windows Active Directory Manual Explotation Information Gathering Reconnaissance Exploit Development Pentesting Web

Review[EN] - eCPPTv3

July 04, 2024  

Information, tips, negative and positive things about eCPPTv3

Pivoting Linux Windows Active Directory Manual Explotation Information Gathering Reconnaissance Exploit Development Pentesting Web

Back to Top ↑

Active Directory

Review[ES] - eCPPTv3

July 04, 2024  

Información, tips, cosas negativas y positivas sobre el eCPPTv3

Pivoting Linux Windows Active Directory Manual Explotation Information Gathering Reconnaissance Exploit Development Pentesting Web

Review[EN] - eCPPTv3

July 04, 2024  

Information, tips, negative and positive things about eCPPTv3

Pivoting Linux Windows Active Directory Manual Explotation Information Gathering Reconnaissance Exploit Development Pentesting Web

Back to Top ↑

Manual Explotation

Review[ES] - eCPPTv3

July 04, 2024  

Información, tips, cosas negativas y positivas sobre el eCPPTv3

Pivoting Linux Windows Active Directory Manual Explotation Information Gathering Reconnaissance Exploit Development Pentesting Web

Review[EN] - eCPPTv3

July 04, 2024  

Information, tips, negative and positive things about eCPPTv3

Pivoting Linux Windows Active Directory Manual Explotation Information Gathering Reconnaissance Exploit Development Pentesting Web

Back to Top ↑

Information Gathering

Review[ES] - eCPPTv3

July 04, 2024  

Información, tips, cosas negativas y positivas sobre el eCPPTv3

Pivoting Linux Windows Active Directory Manual Explotation Information Gathering Reconnaissance Exploit Development Pentesting Web

Review[EN] - eCPPTv3

July 04, 2024  

Information, tips, negative and positive things about eCPPTv3

Pivoting Linux Windows Active Directory Manual Explotation Information Gathering Reconnaissance Exploit Development Pentesting Web

Back to Top ↑

Reconnaissance

Review[ES] - eCPPTv3

July 04, 2024  

Información, tips, cosas negativas y positivas sobre el eCPPTv3

Pivoting Linux Windows Active Directory Manual Explotation Information Gathering Reconnaissance Exploit Development Pentesting Web

Review[EN] - eCPPTv3

July 04, 2024  

Information, tips, negative and positive things about eCPPTv3

Pivoting Linux Windows Active Directory Manual Explotation Information Gathering Reconnaissance Exploit Development Pentesting Web

Back to Top ↑

Exploit Development

Review[ES] - eCPPTv3

July 04, 2024  

Información, tips, cosas negativas y positivas sobre el eCPPTv3

Pivoting Linux Windows Active Directory Manual Explotation Information Gathering Reconnaissance Exploit Development Pentesting Web

Review[EN] - eCPPTv3

July 04, 2024  

Information, tips, negative and positive things about eCPPTv3

Pivoting Linux Windows Active Directory Manual Explotation Information Gathering Reconnaissance Exploit Development Pentesting Web

Back to Top ↑

certificates

eWPT - Review

January 12, 2023  

Esto es una review de la certificación de Elearn Security, donde os cuento mi experiencia.

ctf certificates

Back to Top ↑

WriteUp

DarkHole:2 - WriteUp

January 24, 2023  

WriteUp de la máquina DarkHole:2 de Vulnhub.

ctf WriteUp SQLI Data Exfiltration

Back to Top ↑

Data Exfiltration

DarkHole:2 - WriteUp

January 24, 2023  

WriteUp de la máquina DarkHole:2 de Vulnhub.

ctf WriteUp SQLI Data Exfiltration

Back to Top ↑

AD

Active HTB - WriteUp

February 18, 2023  

WriteUp de la máquina Active de HTB.

ctf Windows Writeup AD SMB

Back to Top ↑

SMB

Active HTB - WriteUp

February 18, 2023  

WriteUp de la máquina Active de HTB.

ctf Windows Writeup AD SMB

Back to Top ↑

Virtual_Hosting

Europa HTB - WriteUp

February 19, 2023  

WriteUp de la máquina Europa de HTB.

ctf Linux Writeup Virtual_Hosting SQLI Pre_Replace Crontab

Back to Top ↑

Pre_Replace

Europa HTB - WriteUp

February 19, 2023  

WriteUp de la máquina Europa de HTB.

ctf Linux Writeup Virtual_Hosting SQLI Pre_Replace Crontab

Back to Top ↑

PIVOTING

Oz HTB - WriteUp

February 20, 2023  

WriteUp de la máquina Oz de HTB.

ctf Linux Writeup Docker SSTI PIVOTING SQLI

Back to Top ↑

Scripting

Validation HTB - WriteUp

February 20, 2023  

WriteUp de la máquina Validation de HTB.

ctf Linux Writeup SQLI Scripting PasswordLeaked

Back to Top ↑

PasswordLeaked

Validation HTB - WriteUp

February 20, 2023  

WriteUp de la máquina Validation de HTB.

ctf Linux Writeup SQLI Scripting PasswordLeaked

Back to Top ↑

Account Operators

Forest HTB - WriteUp

February 20, 2023  

WriteUp de la máquina Forest de HTB.

ctf Windows Writeup RPC-Enum Null-Session ASREPRoast Account Operators WriteDacl

Back to Top ↑

WriteDacl

Forest HTB - WriteUp

February 20, 2023  

WriteUp de la máquina Forest de HTB.

ctf Windows Writeup RPC-Enum Null-Session ASREPRoast Account Operators WriteDacl

Back to Top ↑

git-leak

Frank & Herby THM - WriteUp

February 22, 2023  

WriteUp de la máquina Frank & Herby de THM.

ctf BadPod Writeup git-leak MicroK8s Kubernetes

Back to Top ↑

MicroK8s

Frank & Herby THM - WriteUp

February 22, 2023  

WriteUp de la máquina Frank & Herby de THM.

ctf BadPod Writeup git-leak MicroK8s Kubernetes

Back to Top ↑

Web_Enumeration

Mantis HTB - WriteUp

February 22, 2023  

WriteUp de la máquina Mantis de HTB.

ctf Windows Writeup Web_Enumeration MSSQL Kerberos

Back to Top ↑

NTLMv2

Querier HTB - WriteUp

February 23, 2023  

WriteUp de la máquina Querier de HTB.

ctf Windows Writeup MSSQL NTLMv2 xp_cmdshell Cached GPP Files

Back to Top ↑

xp_cmdshell

Querier HTB - WriteUp

February 23, 2023  

WriteUp de la máquina Querier de HTB.

ctf Windows Writeup MSSQL NTLMv2 xp_cmdshell Cached GPP Files

Back to Top ↑

Cached GPP Files

Querier HTB - WriteUp

February 23, 2023  

WriteUp de la máquina Querier de HTB.

ctf Windows Writeup MSSQL NTLMv2 xp_cmdshell Cached GPP Files

Back to Top ↑

Azure

Monteverde HTB - WriteUp

February 26, 2023  

WriteUp de la máquina Monteverde de HTB.

ctf Windows Writeup RPC-Enum Null-Session BruteForce Azure Group-Abuse

Back to Top ↑

Group-Abuse

Monteverde HTB - WriteUp

February 26, 2023  

WriteUp de la máquina Monteverde de HTB.

ctf Windows Writeup RPC-Enum Null-Session BruteForce Azure Group-Abuse

Back to Top ↑

AI

AI HTB - WriteUp

February 27, 2023  

WriteUp de la máquina AI de HTB.

ctf Linux Writeup AI SQLI JDWP

Back to Top ↑

JDWP

AI HTB - WriteUp

February 27, 2023  

WriteUp de la máquina AI de HTB.

ctf Linux Writeup AI SQLI JDWP

Back to Top ↑

PoC

LocalPotato-CVE-2023-21746

February 27, 2023  

Explotando el PoC de LocalPotato-CVE-2023-21746.

PoC Windows CVE DLL Potato

Back to Top ↑

DLL

LocalPotato-CVE-2023-21746

February 27, 2023  

Explotando el PoC de LocalPotato-CVE-2023-21746.

PoC Windows CVE DLL Potato

Back to Top ↑

Potato

LocalPotato-CVE-2023-21746

February 27, 2023  

Explotando el PoC de LocalPotato-CVE-2023-21746.

PoC Windows CVE DLL Potato

Back to Top ↑

Username-Enumeration

Bart HTB - WriteUp

February 28, 2023  

WriteUp de la máquina Bart de HTB.

ctf Windows Writeup Web Username-Enumeration BruteForce LogPoison SeImpersonatePrivilege

Back to Top ↑

LogPoison

Bart HTB - WriteUp

February 28, 2023  

WriteUp de la máquina Bart de HTB.

ctf Windows Writeup Web Username-Enumeration BruteForce LogPoison SeImpersonatePrivilege

Back to Top ↑

SeImpersonatePrivilege

Bart HTB - WriteUp

February 28, 2023  

WriteUp de la máquina Bart de HTB.

ctf Windows Writeup Web Username-Enumeration BruteForce LogPoison SeImpersonatePrivilege

Back to Top ↑

Sudo-Abuse

Knife HTB - WriteUp

February 28, 2023  

WriteUp de la máquina Knife de HTB.

ctf Linux Writeup Web CVE Sudo-Abuse

Back to Top ↑

Grafana

Ambassador HTB - WriteUp

March 01, 2023  

WriteUp de la máquina Ambassador de HTB.

ctf Linux Writeup Grafana Direcctory-Traversal Consul-Exploit MySQL SQLITE3

Back to Top ↑

Direcctory-Traversal

Ambassador HTB - WriteUp

March 01, 2023  

WriteUp de la máquina Ambassador de HTB.

ctf Linux Writeup Grafana Direcctory-Traversal Consul-Exploit MySQL SQLITE3

Back to Top ↑

Consul-Exploit

Ambassador HTB - WriteUp

March 01, 2023  

WriteUp de la máquina Ambassador de HTB.

ctf Linux Writeup Grafana Direcctory-Traversal Consul-Exploit MySQL SQLITE3

Back to Top ↑

MySQL

Ambassador HTB - WriteUp

March 01, 2023  

WriteUp de la máquina Ambassador de HTB.

ctf Linux Writeup Grafana Direcctory-Traversal Consul-Exploit MySQL SQLITE3

Back to Top ↑

SQLITE3

Ambassador HTB - WriteUp

March 01, 2023  

WriteUp de la máquina Ambassador de HTB.

ctf Linux Writeup Grafana Direcctory-Traversal Consul-Exploit MySQL SQLITE3

Back to Top ↑

ForceChangePassword

Blackfield HTB - WriteUp

March 01, 2023  

WriteUp de la máquina Blackfield de HTB.

ctf Windows Writeup SMB-Enumeration ASREPRoast ForceChangePassword LSASS-DUMP Backup-Operators

Back to Top ↑

LSASS-DUMP

Blackfield HTB - WriteUp

March 01, 2023  

WriteUp de la máquina Blackfield de HTB.

ctf Windows Writeup SMB-Enumeration ASREPRoast ForceChangePassword LSASS-DUMP Backup-Operators

Back to Top ↑

Backup-Operators

Blackfield HTB - WriteUp

March 01, 2023  

WriteUp de la máquina Blackfield de HTB.

ctf Windows Writeup SMB-Enumeration ASREPRoast ForceChangePassword LSASS-DUMP Backup-Operators

Back to Top ↑

TFPT

Joker HTB - WriteUp

March 02, 2023  

WriteUp de la máquina Joker de HTB.

ctf Linux Writeup SQUID TFPT Web-Enumeration Suedoedit Tar

Back to Top ↑

Suedoedit

Joker HTB - WriteUp

March 02, 2023  

WriteUp de la máquina Joker de HTB.

ctf Linux Writeup SQUID TFPT Web-Enumeration Suedoedit Tar

Back to Top ↑

Tar

Joker HTB - WriteUp

March 02, 2023  

WriteUp de la máquina Joker de HTB.

ctf Linux Writeup SQUID TFPT Web-Enumeration Suedoedit Tar

Back to Top ↑

BGP-Hijack

Carrier HTB - WriteUp

March 03, 2023  

WriteUp de la máquina Carrier de HTB.

ctf Linux Writeup Web-Enumeration RCE BGP-Hijack

Back to Top ↑

NFS

Squashed HTB - WriteUp

March 03, 2023  

WriteUp de la máquina Squashed de HTB.

ctf Linux Writeup NFS Web-Shell Magic-Cookies X11

Back to Top ↑

Web-Shell

Squashed HTB - WriteUp

March 03, 2023  

WriteUp de la máquina Squashed de HTB.

ctf Linux Writeup NFS Web-Shell Magic-Cookies X11

Back to Top ↑

Magic-Cookies

Squashed HTB - WriteUp

March 03, 2023  

WriteUp de la máquina Squashed de HTB.

ctf Linux Writeup NFS Web-Shell Magic-Cookies X11

Back to Top ↑

X11

Squashed HTB - WriteUp

March 03, 2023  

WriteUp de la máquina Squashed de HTB.

ctf Linux Writeup NFS Web-Shell Magic-Cookies X11

Back to Top ↑

NoSQLI

Mango HTB - WriteUp

March 04, 2023  

WriteUp de la máquina Mango de HTB.

ctf Linux Writeup Web-Enumeration NoSQLI Password-Reuse SUID

Back to Top ↑

Password-Reuse

Mango HTB - WriteUp

March 04, 2023  

WriteUp de la máquina Mango de HTB.

ctf Linux Writeup Web-Enumeration NoSQLI Password-Reuse SUID

Back to Top ↑

GIT

Secret HTB - WriteUp

March 05, 2023  

WriteUp de la máquina Secret de HTB.

ctf Linux Writeup Web-Enumeration API JWT GIT RCE SUID

Back to Top ↑

XSS

WebHackingPlayground - WriteUp

March 06, 2023  

WriteUp de WebHackingPlayground creado por Takito.

ctf Web Writeup JWT XSS Open-Redirect OTP SSTI SMTP

Back to Top ↑

Open-Redirect

WebHackingPlayground - WriteUp

March 06, 2023  

WriteUp de WebHackingPlayground creado por Takito.

ctf Web Writeup JWT XSS Open-Redirect OTP SSTI SMTP

Back to Top ↑

OTP

WebHackingPlayground - WriteUp

March 06, 2023  

WriteUp de WebHackingPlayground creado por Takito.

ctf Web Writeup JWT XSS Open-Redirect OTP SSTI SMTP

Back to Top ↑

SMTP

WebHackingPlayground - WriteUp

March 06, 2023  

WriteUp de WebHackingPlayground creado por Takito.

ctf Web Writeup JWT XSS Open-Redirect OTP SSTI SMTP

Back to Top ↑

PCAP

Cap HTB - WriteUp

March 07, 2023  

WriteUp de la máquina Cap de HTB.

ctf Linux Writeup Web-Enumeration PCAP Capabilities

Back to Top ↑

Deserialization-Attack

Celestial HTB - WriteUp

March 08, 2023  

WriteUp de la máquina Celestial de HTB.

ctf Linux Writeup Web-Enumeration Deserialization-Attack Crontab

Back to Top ↑

Read-Logs

Backend HTB - WriteUp

March 09, 2023  

WriteUp de la máquina Backend de HTB.

ctf Linux Writeup Web-Enumeration Web-Fuzzing API Read-Logs

Back to Top ↑

SCF-File

Sizzle HTB - WriteUp

March 12, 2023  

WriteUp de la máquina Sizzle de HTB.

ctf Windows Writeup SMB-Enumeration SCF-File Web-Enumeration CA-Certificate Kerberoasting DCSync

Back to Top ↑

CA-Certificate

Sizzle HTB - WriteUp

March 12, 2023  

WriteUp de la máquina Sizzle de HTB.

ctf Windows Writeup SMB-Enumeration SCF-File Web-Enumeration CA-Certificate Kerberoasting DCSync

Back to Top ↑

Kerberoasting

Sizzle HTB - WriteUp

March 12, 2023  

WriteUp de la máquina Sizzle de HTB.

ctf Windows Writeup SMB-Enumeration SCF-File Web-Enumeration CA-Certificate Kerberoasting DCSync

Back to Top ↑

DCSync

Sizzle HTB - WriteUp

March 12, 2023  

WriteUp de la máquina Sizzle de HTB.

ctf Windows Writeup SMB-Enumeration SCF-File Web-Enumeration CA-Certificate Kerberoasting DCSync

Back to Top ↑

AppArmor

Nunchucks HTB - WriteUp

March 13, 2023  

WriteUp de la máquina Nunchucks de HTB.

ctf Linux Writeup Web-Enumeration SSTI Capabilities AppArmor

Back to Top ↑

CouchDB

Canape HTB - WriteUp

March 14, 2023  

WriteUp de la máquina Canape de HTB.

ctf Linux Writeup Web Git Deserialization CouchDB

Back to Top ↑

NoSQL

NodeBlog HTB - WriteUp

March 15, 2023  

WriteUp de la máquina NodeBlog de HTB.

ctf Linux Writeup Web NoSQL XXE Deserialization Data-Exposure Mongo

Back to Top ↑

Data-Exposure

NodeBlog HTB - WriteUp

March 15, 2023  

WriteUp de la máquina NodeBlog de HTB.

ctf Linux Writeup Web NoSQL XXE Deserialization Data-Exposure Mongo

Back to Top ↑

Mongo

NodeBlog HTB - WriteUp

March 15, 2023  

WriteUp de la máquina NodeBlog de HTB.

ctf Linux Writeup Web NoSQL XXE Deserialization Data-Exposure Mongo

Back to Top ↑

WebShell

TheNoteBook HTB - WriteUp

March 16, 2023  

WriteUp de la máquina TheNoteBook de HTB.

ctf Linux Writeup Web JWT WebShell Docker

Back to Top ↑

Moodle

Teacher HTB - WriteUp

March 17, 2023  

WriteUp de la máquina Teacher de HTB.

ctf Linux Writeup Web-Enum Moodle Python-Script CVE

Back to Top ↑

Python-Script

Teacher HTB - WriteUp

March 17, 2023  

WriteUp de la máquina Teacher de HTB.

ctf Linux Writeup Web-Enum Moodle Python-Script CVE

Back to Top ↑

Privesc

GoodGames HTB - WriteUp

March 26, 2023  

WriteUp de la máquina GoodGames de HTB.

ctf Linux Writeup Web-Enum SQLI SSTI Docker Privesc

Back to Top ↑

Jenkins

Builder HTB - WriteUp

April 23, 2024  

WriteUp de la máquina Builder de HTB.

ctf Linux Jenkins CVE Web

Back to Top ↑

Reflected XSS

Vulnerabilidad XSS Reflejada Encontrada en el Sitio Web de la Agencia Tributaria

September 04, 2024  

Informe de Vulnerabilidad XSS en la Web de la Agencia Tributaria

Pentesting Web Reflected XSS

Back to Top ↑