private blog where I publish writeups for CTFs or HackTheBox machines
Paper is an easy HackTheBox machine that was released on the 5th February 2022. It is a linux machine and features an insecure WordPress blog. Initial Foothold I started as always with a nmap scan: I found three open ports: ssh, http and https. SSH is usually used for easier access once we pwned the…
This year, Santa went digital and hired a bunch of tech elves to update hisinfra. Unfortunately, some of them were malicious elves who compromisedSanta’s data warehouse in the North Pole! Web Toy Workshop ★☆☆☆ Challenge Info The work is going well on Santa’s toy workshop but we lost contact with the manager in charge! We…