P.O.O Overview P.O.O is a small Active Directory PRO LAB from HackTheBox that puts enumeration, lateral movement and privilege escalation to the test. The goal is to compromise the perimeter host...

Garfield Overview Garfield is a hard-rated Windows Active Directory machine. We start with credentials for a low-privileged domain account, so there’s no initial foothold to find, it’s an assumed...

Unintended Overview Unintended is a MINI PRO LAB from HackTheBox. This Red Team Operator I lab exposes players to: Active Directory backup enumeration Lateral movement Network Pivoting ...

HackTheBox - Under The Web Overview Under The Web is a medium-rated pwnable built around a custom image-processing PHP extension sitting behind a PHP web application. The application is vulnerab...

Vintage Overview Vintage is a hard-difficulty Windows machine built around an assumed-breach scenario, where we begin with a set of low-privileged domain user credentials. The box models an Acti...

OSCP Overview Well well, back in January I set myself a goal to get the OSCP and CPTS this year, and here I am now… with the OSCP cert. OSCP+ The OSCP (OffSec Certified Professional) is OffSec...

Flight Overview Flight is a hard-rated Windows machine. It starts with a website running two virtual hosts, one of which is vulnerable to LFI. We abuse the LFI to grab an NTLMv2 hash and crack it...

Strip Mine Overview Hey heyyy 👋🏽 I originally wanted to make a dedicated blog post for a reversing challenge I solved on pwn.college, but… I got lazy. 😭 This challenge wasn’t graded with points...

Program Security Overview Over the past few years I’ve been studying pwn/re occasionally, using pwn.college as my main platform of study. I won’t go into detail about what made me start studying...

HackTheBox - Old Bridge Overview Old Bridge is a hard-difficulty pwn challenge centered on a forked server vulnerable to a buffer overflow, with limited control over the instruction pointer. Pro...