Overview Bastard is a vulnerable machine from Hack the Box that requires some web app enumeration and using a public exploit for remote code execution on a vulnerable service. The foothold is accom...

Overview Bastion is a vulnerable machine from Hack the Box that requires some deeper smb enumeration, with exploring some unique files, and mounting the smb share locally to take a closer look. The...

Overview Arctic is a vulnerable machine from Hack the Box that requires some basic web enumeration with using exploits to grab credentials and get a shell. The foothold is accomplished after using ...

Overview SecNotes is a vulnerable machine from Hack the Box that requires some basic web enumeration and file reading, with using SQL Injection on the login page. The foothold is accomplished after...

Overview Alfred is a vulnerable machine from TryHackMe that requires some standard enumeration with abusing token impersonation. The foothold is accomplished after some enumeration of the web page ...

Overview Access is a vulnerable machine from Hack the Box that requires some unique enumeration and file reading, with abusing a local file on the target to read the last flag. The foothold is acco...

Overview Jeeves is a vulnerable machine from Hack the Box that requires some basic enumeration and directory fuzzing. The foothold is accomplished after some enumeration of web pages and gaining ac...

Overview Blaster is a vulnerable machine from TryHackMe that requires some standard enumeration with running one exploit. The foothold is accomplished after some enumeration of the web page, and th...

Overview Steel Mountain is a vulnerable machine from TryHackMe that requires some standard enumeration with setting up and running a couple of exploits. After you find the vulnerable services, the ...

Overview Agent Tesla is a remote access trojan (RAT) that is often associated with phishing attacks. Due to its increased flexibility, it has seen a lot of use by threat actors. In this page, we br...