Hack The Box · Apuntes

Writeups

Resoluciones documentadas paso a paso. Enumeración, explotación, post-explotación y escalada de privilegios.

CategoríaTodas

DificultadTodas

35 writeupsLimpiar filtros

HackTheBox

Inject

Linux8 minjun 2026

Web EnumerationLFIInformation Leakage

HackTheBox

Precious

Linux8 minjun 2026

pdfkitCommand InjectionCVE-2022-25765

HackTheBox

Jeeves

WindowsMedium9 minoct 2025

Jenkins ExploitationJuicyPotatoSeImpersonatePrivilege

HackTheBox

Epsilon

LinuxMedium10 minoct 2025

Git Source Leak ExploitAWS EnumLambda Function Enum

HackTheBox

RedPanda

LinuxEasy9 minoct 2025

SSTIRCEXXE

HackTheBox

OpenSource

LinuxEasy15 minoct 2025

Web EnumGithub EnumInformation Leakage

HackTheBox

Trick

LinuxEasy8 minoct 2025

DNS EnumDomain Zone Transfer Attack (AXFR)SQLi

HackTheBox

Remote

WindowsEasy16 minsept 2025

Web EnumNFS EnumInformation Leakage

HackTheBox

Delivery

LinuxEasy7 minsept 2025

VHOST EnumMetterMostInformation Leakage

HackTheBox

Netmon

WindowsEasy9 minsept 2025

FTP EnumInformation LeakageAbusing PRTG Network Monitor

HackTheBox

Laboratory

LinuxEasy7 minsept 2025

SSL Certificate EnumerationGitlabAbusing gitlab-rails console

HackTheBox

Frolic

LinuxEasy15 minsept 2025

Web EnumInformation LeakageEsoteric languages

HackTheBox

Doctor

LinuxEasy11 minsept 2025

SSTIRCEAbusing adm group

HackTheBox

Sense

LinuxEasy7 minsept 2025

Information LeakagePFsenseAbusing RRD Graphs

HackTheBox

Bounty

WindowsEasy10 minago 2025

IIS EnumIIS ExploitationAbusing SeImpersonatePrivilege

HackTheBox

Admirer

LinuxEasy11 minago 2025

Information LeakageAdmirer explotationAbusing Sudoers Privilege

HackTheBox

Safe

LinuxEasy12 minago 2025

SNMPInformation LeakagePort Forwarding

HackTheBox

Pandora

LinuxEasy14 minago 2025

SNMPInformation LeakagePort Forwarding

HackTheBox

Postman

LinuxEasy5 minago 2025

Information LeakagePFsenseAbusing RRD Graphs

HackTheBox

ServMon

WindowsEasy11 minago 2025

NVMS-1000LFIDirectory Traversal

HackTheBox

SwagShop

LinuxEasy6 minago 2025

Information LeakagePFsenseAbusing RRD Graphs

HackTheBox

Backdoor

LinuxEasy8 minago 2025

WordPressLFILFI to RCE

HackTheBox

Blunder

LinuxEasy4 minago 2025

Bludit CMSBypassing IP BlockingDirectory Traversal

HackTheBox

Tabby

LinuxEasy4 minago 2025

LFIAbusing TomcatLXC Exploitation

HackTheBox

Haystack

LinuxEasy8 minjun 2025

ElasticSearchInformation LeakageKibana

HackTheBox

Traverxec

LinuxEasy6 minjun 2025

NostromoExploiting JournalctleWPT

HackTheBox

Shocker

LinuxEasy3 minmar 2025

ShellShock AttackAbusing SudoersPerl

HackTheBox

SteamCoud

LinuxEasy10 minmar 2025

KubernetesYAML POD RCEeWPTXv2

HackTheBox

Toolbox

WindowsEasy5 minmar 2025

PostgreSQL Injection (RCE)Abusing boot2dockerPivoting

HackTheBox

GoodGames

LinuxEasy5 minmar 2025

SQLiHash CrackingPassword Reuse

HackTheBox

Nunchucks

LinuxEasy5 minmar 2025

SSTIAppArmoreJPT

HackTheBox

NodeBlog

LinuxEasy4 minfeb 2025

NoSQLiXXEDeserialization Attack

HackTheBox

Love

WindowsEasy4 minfeb 2025

SSRFmsiexec/msi fileeJPT

HackTheBox

Horizontall

LinuxEasy3 minfeb 2025

Information LeakageStrapi CMSLaravel

HackTheBox

Validation

LinuxEasy4 minfeb 2025

SQLiRCEInformation Leakage