Writeups

Security Writeups

CTF writeups, machine walkthroughs, and security challenge solutions.

Platform

All Hack The Box TryHackMe ThunderCipher

Difficulty

easy medium hard insane

All Writeups

17 available

tryhackmemediumLinux

VulnNet: dotpy

Scanned target with nmap

Enumerated Python web application

tryhackmemediumWindows

VulnNet: Roasted

AD enumeration

Identified ASREPRoastable accounts

tryhackmemediumWindows

VulnNet: Internal

Network enumeration

Identified internal services

tryhackmemediumWindows

VulnNet: Active

AD enumeration with BloodHound

Identified Kerberoastable accounts

tryhackmemediumLinux

Sustah

Initial enumeration

Discovered web application

tryhackmemediumLinux

RazorBlack

Scanned target with nmap

Enumerated web application

tryhackmemediumLinux

One Piece

Nmap scan revealed services

Enumerated web application

tryhackmemediumLinux

Ledger

Initial nmap scan

Enumerated web application

tryhackmemediumLinux

IronShade

Nmap scan revealed services

Enumerated web server

tryhackmemediumLinux

Inferno

Scanned target with nmap

Enumerated web application

tryhackmemediumLinux

Exfilibur

Nmap scan revealed web services

Enumerated application for data exfiltration vectors

tryhackmemediumLinux

Devie

Initial enumeration with nmap

Discovered web application with development endpoints

tryhackmemediumLinux

Debug

Nmap scan revealed multiple services

Enumerated web application for debugging endpoints

tryhackmemediumLinux

CupidCards

Scanned target with nmap

Enumerated web application endpoints

tryhackmemediumLinux

Chains of Love

Enumerated web application for SSRF vulnerabilities

Discovered internal services through SSRF

tryhackmemediumLinux

Brute

Scanned target with nmap

Enumerated web application for input vectors

tryhackmemediumWindows

Attacktive Directory

Enumerated AD environment using BloodHound

Identified Kerberoastable service accounts