For this post, we will explore escalating privileges on a target Linux host by using Docker breakout techniques. We will review three different docker breakout scenarios. In each scenario, we will see a different technique that can be leveraged to…
In this post, we will be exploring manual enumeration techniques that can be used to get a “lay of the land” on a target host once a foothold has been established. Manual enumeration is an important skill to possess as…
In this Walkthrough, we will be hacking the machine Monteverde from HackTheBox. To begin, we will preform domain specific enumeration, which leads to the discovery that we can dump a lot of information about the DC over LDAP with an…
In this Walkthrough, we will be hacking the machine Sauna from HackTheBox. We will start with some domain specific enumeration with no credentials, hunting for anonymous access. An anonymous LDAP search will reveal our first user ‘hsmith’. Unable to AS-REP…
In this Walkthrough, we will be hacking the machine Forest from HackTheBox. We will start with some domain specific enumeration with no credentials, hunting for anonymous access. From there, we will find a quick win as we look for an…
In this Walkthrough, we will be hacking the machine Active from HackTheBox. To begin, we will enumerate the SMB shares and find two custom shares named Users and Replication. Inside the Replication share, we will find the Groups.xml file, which…
