A concise, practical walkthrough of the HTB WingData machine. It covers host enumeration, VHost discovery, Wing FTP command execution, user shell access, and root escalation via a Python tarfile re...

Author: r0h1tAnand Enumeration Nikto ❯ nikto -h http://monitorsfour.htb/ - Nikto v2.5.0 --------------------------------------------------------------------------- + Target IP: 10.10.11...

Author: Sierra0117 Enumeration NMAP ❯ nmap -sC -sV -A imagery.htb Starting Nmap 7.95 ( https://nmap.org ) at 2025-10-11 14:31 IST Nmap scan report for imagery.htb (10.10.11.88) Host is up (0.22s...

Author: Sierra0117 Enumeration NMAP ❯ nmap -A -sU -p 500 expressway.htb Starting Nmap 7.95 ( https://nmap.org ) at 2025-09-27 13:38 IST Nmap scan report for expressway.htb (10.10.11.87) Host is ...

Author: r0hit.A Enumeration We start with a nmap scan to identify open ports and services running on the target machine. NMAP ❯ nmap -sC -sV -A cyprusbank.thm Starting Nmap 7.95 ( https://nmap....

Author: Sierra0117 Enumeration NMAP ❯ nmap -sC -sV -A soulmate.htb Starting Nmap 7.95 ( https://nmap.org ) at 2025-09-09 18:52 IST Nmap scan report for soulmate...

OSINT Challenge Questions – Challenge 4 Below are the solved OSINT challenge questions from the Social Media Investigation Hub. Question 1 What is the real name of the person behind the TechRev...

A concise summary: this write-up shows how a Next.js authorization bypass and a misplaced Terraform provider installation can be chained to obtain both user and root on the “Previous” HTB machine. ...

A concise, practical walkthrough to recover Chrome credentials from the TryHackMe “Chrome” room. This post shows the investigative flow: reconstruct files from a pcap, extract AES key material from...

A concise, practical walkthrough of the HTB “Puppy” Active Directory machine. It covers network enumeration, KeePass credential recovery, abusing GenericWrite to modify group membership, lateral mo...