Unhackable

Unhackable

Ghost With Gitlab CI/CD

Ghost With Gitlab CI/CD

Discover how to integrate GitLab with Ghost CMS for auto-deploying themes, a feature commonly associated with Github. This post serves as a comprehensive guide for those using a self-hosted GitLab instance and struggling to find resources on this integration.

mKingdom - THM

mKingdom is an easy rated box. User obtained by exploiting concrete CMS and root gained by exploiting hosts file.

Integrate SimpleFIN and Firefly With N8N

Integrate SimpleFIN and Firefly With N8N

By using N8N we can create a workflow ton integrate firefly with SimpleFIN to automate the adding of transactions to firefly . This workflow can also categorize two transaction as transfers based upon a defined criteria

N8N Code Node With Python

N8N Code Node With Python

N8N is an opensource workflow automation tool that can be self hosted. One of the many useful features is running the code node allowing us to write custom JavaScript and Python code to manipulate the data. This is a short blog on how use custom Python in N8N code node.

Open Source Hygiene

Open Source Hygiene

Open source code has become an integral part of modern software development. It accelerates innovation by providing developers with ready-made components that the developers can incorporate in their projects. However using open source components can present a significant security risk if they are not properly tracked an managed. Keeping track

acme.sh Wildcard Certs And Debugging With openssl and curl

homelab Featured

acme.sh Wildcard Certs And Debugging With openssl and curl

Use acme.sh to issue wildcard certificates on domain hosted with Cloudflare. Use openssl to inspect the certificate and curl to verify the certificate is actually being used.

Plotted-TMS - THM

Plotted-TMS - THM

Plotted-TMS, is an easy rated box. www-data obtained by using exploiting the webpage, plot_admin obtained by exploiting a cron job running a script and root gained by exploiting doas.

Conti - THM

Conti, is a medium rated room. Use splunk to investigate the conti ransonmware

Zeno - THM

Zeno, is a medium rated box. User1 obtained by using exploiting the webpage, user2 obtained by using found credentials and root gained by exploiting a service file Recon nmap Start the box with a nmap scan to identify what services are running on the box, including the version of the

Sweettooth Inc - THM

Sweettooth Inc - THM

Sweettooth Inc, is a medium rated box. User obtained by using exploiting influxdb and root gained by docker escape

Classic Passwd - THM

Classic Passwd - THM

Classic Passwd, is a medium rated challenge. User obtained by using radare2

Cyborg - THM

Cyborg, is an easy rated box. Initial foothold gained by extracting a borg archive and privesc gained by modifying file running as sudo.

Sustah - THM

Cyborg, is a medium rated box. Initial foothold gained by exploiting a cms application and privesc gained by exploiting doas configuration

Chocolate Factory - THM

Chocolate Factory - THM

Chocolate Factory, is an easy rated box. Initial foothold gained by exploiting a webpage with arbitrary command and privesc gained by exploiting vi.

Overpass 3 - Hosting - THM

Overpass 3 - Hosting - THM

Overpass 3 - Hosting, is a medium rated box. Initial foothold gained by decrypting a gpg encrypted file and privesc gained by mounting nfs share

Startup - THM

Startup, is an easy rated box. Initial foothold gained by php rce, privesc gained by editing a script.

Revenge - THM

Revenge, is a medium rated box. Initial foothold gained by sql injection, privesc gained by exploiting systemctl.

Git Happens - THM

Git Happens - THM

Git Happens, is an easy rated box. Flag gained by downloading git directory and viewing source code

Blog - THM

Blog, is a medium rated box. Initial foothold gained by bruteforcing for credentials and exploiting CVE-2019-8943 for user and exploiting a suid binary for root.

Book - HTB

Book, is a medium rated box. Initial foothold gained by truncated sql injection and exploiting a webapp and privesc gained by exploiting logrotate for root.

Tabby - HTB

Tabby, is an easy rated box. Initial foothold gained by LFI and exploiting a webapp and privesc gained by cracking a zip file for ash and exploiting the the lxd group for root

Cache - HTB

Cache, is a medium rated box. Initial foothold gained by vhost discovery and exploit a webapp and privesc gained by accessing memcache server for a user and exploiting the docker group for root

Break Out The Cage - THM

Break Out The Cage - THM

Break out the cage, is an easy rated box. Initial foothold gained by steganalysis, privesc gained by exploiting a python for cage and exploting the lxd group for root

Haskhell - THM

Haskhell, is a medium rated box. Initial foothold gained by exploiting a webapp and privesc obtained by misusing sudo access