Road to OSCP #5 -Hack the box "Lame" write up

Welcome to the “Road to OSCP” series! Today, we’re diving into the Lame machine from Hack The Box (HTB). This machine is part of the recommended HTB machines for OSCP preparation, curated by “TJNULL.” Let’s get started. Enumeration We’ll start with a simple enumeration using Nmap, which reveals several interesting ports and their associated software versions: The FTP server appears particularly interesting, as it might have a backdoor that allows us to gain a shell: . ...

October 1, 2024

Road to OSCP #4 -Hack the box "Perfection" write up

Welcome to the latest installment of “Road to OSCP”, a blog series chronicling my pursuit of the OSCP certification. In today’s episode, we’ll explore the “perfection” machine on the Hack the Box platform. While this Linux-based machine isn’t typically recommended for OSCP preparation, it’s a recent addition to the platform. Diving into newer machines can provide fresh challenges and learning opportunities. Let’s delve into what makes the “Perfection” machine intriguing and potentially beneficial for our hacking skills. ...

September 15, 2024

Road to OSCP #3 -Hack the box "Devel" write up

Welcome back to “Road to OSCP”, a series where I share my journey toward obtaining the OSCP certification. In this second episode, we turn our attention to the “Blue” machine on the “Hack the Box” platform. I continue with an other machine in the “TJnull” VM list. This machine is based on Windows, providing another opportunity to hone our skills in a familiar yet challenging environment. Enumeration First, we’ll conduct an nmap scan to identify what services are running on the machine: ...

September 1, 2024

Road to OSCP #2 -Hack the box "Blue" write up

Welcome back to “Road to OSCP”, a series where I share my journey toward obtaining the OSCP certification. In this second episode, we turn our attention to the “Blue” machine on the “Hack the Box” platform. Like the previous machine we tackled, “Blue” is based on Windows, providing another opportunity to hone our skills in a familiar yet challenging environment. Enumeration First, we’ll conduct an nmap scan to identify what services are running : ...

July 1, 2024

Road to OSCP #1 -Hack the box "Legacy" write up

It’s the first episode of “Road to OSCP,” a series focused on preparing for the OSCP certification. To kick off this training, I have subscribed to a pentesting training platform called “Hack the Box.” This platform offers numerous machines to pwn, providing a practical, hands-on approach to learning security penetration techniques. I’m starting this series with the “Legacy” machine, which is based on Windows, because my background is stronger in Linux systems. This choice will help me broaden my expertise and challenge my skills in a less familiar environment. ...

June 1, 2024