ARZ101·Dec 4, 2024Vulnlab — RedelegateRedelegate, an AD machine from Vulnlab involved enumerating ftp to find a keepass database file and password format, cracking the file…
ARZ101·Oct 28, 2024HackTheBox — MistMist an insane difficult machine involved an instance of pluck being vulnerable to both local file inclusion (LFI) and remote code…
ARZ101·Oct 13, 2024Vulnlab — CicadaCicada is a standalone windows machine enabled with only kerberos authentication that involved enumerating NFS share to find domain…
ARZ101·Oct 4, 2024Vulnlab — HeronHeron from vulnlab, had a linux jump server access to domain controller, using chisel for socks proxy, enumerating the internal website…
ARZ101·Sep 19, 2024Vulnlab — TenguTengu, a medium rated chained machine from vulnlab consisting of two windows and one linux host, had an instance node-red running on linux…
ARZ101·Jul 22, 2024Vulnlab — PhantomPhantom involved enumerating shares to find an email with a password, enumerating domain users by bruteforcing SIDs, password spraying to…
ARZ101·Jul 9, 2024Vulnlab — KlendathuKlendathu, an insane rated machine involved enumerating nfs share containing a configuration file with password hash of domain user, this…
ARZ101·Jul 1, 2024Vulnlab — LockLock is a basic windows machine which involved enumerating the gitea repository to find a Personal Access Token (PAT), through which it…
ARZ101·May 10, 2024Vulnlab — SendaiSendai involved enumerating usernames through smb shares having password expired, resetting their password, belonging to Support group they…
ARZ101·Apr 30, 2024Vulnlab — VigilantVigilant a hard rated chained machine involved enumerating smb shares to find an encrytped pdf file, analyzing the ADAudit dll file to…
