Introduction Recently, a Telegram user by the handle @belka_e shared a screenshot in the poxek chat, which drew attention to a suspicious script. This script claimed to bypass Discord bans in Russ...

Intro Hello hackers! In this box we are going to extract user information from LDAP, figure out working with Azure AD connect and exploit it, in a DCSync like way to obtain the plaintext password o...

Intro Hello hackers! In this HTB easy machine, we are going to be exploiting kerberos ‘No preauth’ users, enumerating with winPEAS and dumping LSASS with mimikatz. This was a pretty strait forward ...

Intro Hi fellow hackers! In this HTB medium box, we are going to exploit SQL injection, PHP remote file inclusion and do a bunch of pivoting betweeen users with the help of bloodhound and some bro...