Overview Arctic is a vulnerable machine from Hack the Box that requires some basic web enumeration with using exploits to grab credentials and get a shell. The foothold is accomplished after using ...

Overview SecNotes is a vulnerable machine from Hack the Box that requires some basic web enumeration and file reading, with using SQL Injection on the login page. The foothold is accomplished after...

Overview Alfred is a vulnerable machine from TryHackMe that requires some standard enumeration with abusing token impersonation. The foothold is accomplished after some enumeration of the web page ...

Overview Access is a vulnerable machine from Hack the Box that requires some unique enumeration and file reading, with abusing a local file on the target to read the last flag. The foothold is acco...

Overview Jeeves is a vulnerable machine from Hack the Box that requires some basic enumeration and directory fuzzing. The foothold is accomplished after some enumeration of web pages and gaining ac...

Overview Blaster is a vulnerable machine from TryHackMe that requires some standard enumeration with running one exploit. The foothold is accomplished after some enumeration of the web page, and th...

Overview Steel Mountain is a vulnerable machine from TryHackMe that requires some standard enumeration with setting up and running a couple of exploits. After you find the vulnerable services, the ...

Overview Agent Tesla is a remote access trojan (RAT) that is often associated with phishing attacks. Due to its increased flexibility, it has seen a lot of use by threat actors. In this page, we br...

Overview Sapphire Stealer is an Open Source information stealer, observed across multiple repositories. The purpose of this information stealer is to steal browser data and other data in files, an...

Overview Threat actors will sometimes modify a known and widely utilized application in order to trick users into downloading something they thought is safe, but contains malicious code. This is o...