R:Null's hacky things

TryHackMe: Advent of Cyber 2024 - Backstory

17 days ago 2 min read

An annual event organised by TryHackMe, Advent of Cyber is a holiday event that spans from 1 Dec to 25 Dec. A new task is unveiled daily for everyone to participate and follow

HTB - Litter

a year ago 4 min read sherlocks blue team soc dns tunneling easy writeup

Scenario Khalid has just logged onto a host that he and his team use as a testing host for many different purposes, it’s off their corporate network but has access to lots

HTB - Previse Write-up

3 years ago 7 min read hackthebox easy php exec PATH abuse indirect reference

Rated Easy by HackTheBox and created by m4lwhere, we discover vulnerabilities in exposing protected pages and sensitive data, unsanitised inputs and dangers in relative pathing.

HTB - Writer Write-up

3 years ago 12 min read hackthebox medium writeup apt-get update disclaimer sql injection python mysql hash cracking filter smtp programming cronjob gtfobins

Rated Medium by HackTheBox and created by TheCyberGeek. Through this machine, we learn about the importance of sanitising inputs, having proper password management and policies, proper privilege segmentation and proper directory permissions.

HTB - BountyHunter Write-up

3 years ago 6 min read hackthebox xxe python eval writeup easy

Rated Easy by HackTheBox and created by ejedev, we discover XML External Entity (XXE) and Python eval() function vulnerabilities.