NoSec

Conversor Writeup — Hack The Box

[USER] I started with a fast nmap scan:

Signed - Hack The Box

[USER] Initial credentials provided:

Imagery — HTB Writeup

[USER] The web runs an Image Gallery application.

Expressway — HTB Writeup

[USER] First shot, as usual: a quick TCP port scan. If you only see one or two ports open, don’t chill yet — a lot of “quiet” boxes say the interesting stuff over UDP.

Hacknet — HTB Writeup

[USER] This writeup covers user access only using a Burp Suite workflow (no curl). Chain: SSTI in username ➜ IDOR on likes ➜ leak email & password ➜ SSH.

Soulmate — Hack The Box

[USER] A new vhost was discovered: ftp.soulmate.htb