Hack The Box: Buff

• Edgerunner
• January 9, 2021
• Infosec

In this machine we need to do some experimenting to avoid Windows Defender and figure out how to run a Python exploit when Python isn’t installed.

Hack The Box: Haystack

• Edgerunner
• November 2, 2019
• HackTheBox, Infosec, Writeup

An interesting box sitting on the ELK (ElasticSearch, Logstash & Kibana) stack with a slant for the CTF side, but a very good introduction to those technologies.

Hack The Box: La Casa de Papel

• Edgerunner
• September 2, 2019
• HackTheBox, Infosec, Writeup

Despite the “Easy” tag, La Casa de Papel was an elaborate box. A vulnerable service leads to an unusual, limited PHP shell which allows us to generate our own signed certificates to access a specific part of the site. From there, a local file inclusion lets us acquire SSH credentials and then escalate to root via a misconfiguration.

Hack The Box: Lightweight

• Edgerunner
• May 12, 2019
• HackTheBox, Infosec, Writeup

A fairly straightforward machine, Lightweight lets us explore an insuficiently secured LDAP environment, where we intercept credentials by listening in to the network device. It also leads down the path of Linux capabilities, to find an openssl binary which can do far more than it should.

Kali Linux on the Huawei P10

• Edgerunner
• December 4, 2018
• Devlog, Infosec

Motivation With my laptop being more of a coffee table which can be moved rather than a portable device (with a comparable battery life), I was wondering if it was possible to get a Linux distribution running on my Android phone, a Huawei P10 with Oreo 8.0.0. This article tries to unify all the various…