ssh
HackTheBox Writeup - Titanic Room
· ☕ 6 min read · 👨‍💻 g4nd1v
Writeup for the "Titanic" machine on HackTheBox. It involves exploiting LFI to discover sensitive Gitea configuration and database files, cracking PBKDF2 hashes for SSH access, and escalating privileges via a shared library injection in ImageMagick (CVE-2024-41817).

HackTheBox Writeup - Markup Room
· ☕ 3 min read · 👨‍💻 g4nd1v
Walkthrough of the "Markup" machine on HackTheBox, featuring enumeration, XML external entity (XXE) injection to gain a user shell, and privilege escalation via writable batch script to SYSTEM.

HackTHeBox Writeup - Sea Room
· ☕ 5 min read · 👨‍💻 g4nd1v
Detailed walkthrough of the Sea room on HackTheBox platform, covering initial enumeration, exploiting vulnerabilities, and obtaining user and root flags.