-
Doomsday Device Writeup [Vulnhub]
Doomsday Device is a CTF like machine themed on “The Office” where we will have to recollect all the flags until we get root user, since it’s a CTF like machine I will structure this writeup based on the flags rather than the phases as I usually do. First we...
-
Shuriken Node Writeup [Vulnhub]
Shuriken Node is a Linux based machine created by TheCyb3rW0lf, it is the second machine on his series of Shuriken, we will get access to this machine exploiting a NodeJS deserealization vulnerability, find the ssh key of another using lying on the system, bruteforce the password of that key using...
-
Passage Writeup [HTB]
Passage is a Linux based machine that was active since September 05 of 2020 to March 06 of 2021, to solve this machine we will create us an account on their website, with that we will see that we can upload a profile picture on it, but we can upload...
-
Doctor Writeup [HTB]
Doctor is a Linux based machine that was active since September 26th of 2020 to February 6th of 2021, we will start this machine creating an account on its site and finding a SSTI vulnerability where the results are not reflected on the same page that we inject our payload,...
-
Worker Writeup [HTB]
Worker is a Windows based machine that was active since August 15th of 2020 to January 30th of 2021, we will start this machine cloning a repository stored on Subversion, on this repository we will get a subdomain where we will find an instance of Azure Devops, also on the...