Administrator - HTB

Sun, 04 May 2025 00:00:00 +0000

Details

URL	Hack The Box :: Administrator
Difficulty	Medium
User Solves	U: 7241 ~ R: 7025
Release Date	09 Nov, 2024

Overview

This machine simulates a realistic internal Windows Active Directory environment. The initial access is granted with the following credentials:

Username: olivia
Password: ichliebedich

Reconnaissance

Rustscan + Nmap

A Rustscan quick sweep followed by Nmap revealed the following open ports:

PORT      STATE SERVICE      VERSION
21/tcp    open  ftp          Microsoft ftpd
53/tcp    open  domain       Simple DNS Plus
88/tcp    open  kerberos-sec Microsoft Windows Kerberos
135/tcp   open  msrpc        Microsoft Windows RPC
139/tcp   open  netbios-ssn  Microsoft Windows netbios-ssn
464/tcp   open  kpasswd5?
5985/tcp  open  http         Microsoft HTTPAPI httpd 2.0 (WinRM)
47001/tcp open  http         Microsoft HTTPAPI httpd 2.0
49666/tcp open  msrpc        
49854/tcp open  ncacn_http   Microsoft RPC over HTTP
49859/tcp open  msrpc
49914/tcp open  msrpc
62532/tcp open  msrpc

Key services: FTP (21), Kerberos (88), and WinRM (5985)

Clockwork Guardian | Coding

Tue, 29 Apr 2025 00:00:00 +0000

🕰️ Clockwork Guardian — Write-Up | Cyber Apocalypse 2025

Details
URL	[Hack The Box :: Clockwork Guardian
Difficulty	Easy
Team Rank	541 / 8129
CTF Date	26 Mar, 13:00

📖 Challenge Summary

The Clockwork Sentinels defending Eldoria’s Skywatch Spire have gone rogue! You must navigate through the spire, avoiding hostile sentinels (1) and finding the safest path to the exit ('E'), starting from (0, 0).

🧠 Problem Rules

You are given a 2D grid where:

Dragons Flight | Coding

Tue, 29 Apr 2025 00:00:00 +0000

🐉 Dragons Flight — Write-Up | Cyber Apocalypse 2025

Details
URL	[Hack The Box :: Dragons Flight
Difficulty	Easy
Team Rank	541 / 8129
CTF Date	26 Mar, 13:00

📖 Challenge Summary

In the mystical realm of the Floating Isles, dragons navigate the skies between sacred sanctuaries. But turbulent wind currents across segmented paths can make or break their flight. You, the Dragon Flight Master, must simulate their journey by adapting to wind shifts and answering critical pathfinding queries in real-time.

Dragons Fury | Coding

Tue, 29 Apr 2025 00:00:00 +0000

⚔️ Dragons Fury — Write-Up | Cyber Apocalypse 2025

Details
URL	[Hack The Box :: Dragons Fury
Difficulty	Easy
Team Rank	541 / 8129
CTF Date	26 Mar, 13:00

📜 Challenge Description

The dragons strike Malakar’s forces in rounds. Each round presents multiple damage options. The goal is to choose exactly one attack per round so the total damage equals a target number T.

Only one valid combination exists.

Enchanted Cipher | Coding

Tue, 29 Apr 2025 00:00:00 +0000

🧙‍♂️ Enchanted Cipher — Write-Up | Cyber Apocalypse 2025

Details
URL	[Hack The Box :: Enchanted Cipher
Difficulty	Easy
Team Rank	541 / 8129
CTF Date	26 Mar, 13:00

📖 Challenge Summary

The Grand Arcane Codex has been corrupted. To restore historical records, each entry must be deciphered from an Enchanted Shifting Cipher. This cipher encrypts messages using a Caesar-style shift, but with a twist:

🧩 Cipher Rules

Only alphabetic characters are encrypted; all other characters (e.g., spaces) are ignored during encryption.
Characters are grouped into chunks of 5 letters.
Each group is encrypted with a random Caesar shift (between 1 and 25).
The input ends with:
1. The number of shift groups.
2. A list of Caesar shift values, one for each group.

Your task is to reverse the cipher, restoring the original plaintext while preserving the formatting (spaces, punctuation, etc.).

Summoners Incantation | Coding

Tue, 29 Apr 2025 00:00:00 +0000

🧙‍♂️ Summoner’s Incantation — Write-Up | Cyber Apocalypse 2025

Details
URL	[Hack The Box :: Summoners Incantation
Difficulty	Easy
Team Rank	541 / 8129
CTF Date	26 Mar, 13:00

📜 Challenge Description:

Deep within the ancient halls lies the secret of the Dragon’s Heart—a power that can only be unlocked by combining magical tokens in just the right way. The tokens are delicate: if two adjacent tokens are combined, their energy is lost.

The Hillside Haven | OSINT

Tue, 29 Apr 2025 00:00:00 +0000

🧙‍♂️ The Hillside Haven — Write-Up| Cyber Apocalypse 2025

Details
URL	[Hack The Box :: Summoners Incantation
Difficulty	Easy
Team Rank	541 / 8129
CTF Date	26 Mar, 13:00

🧙‍♀️ Challenge Description

Nyla stands before her largest crystal, hands weaving intricate patterns as she conjures an aerial view of the Western Hills district. A noble family’s ancestral home must be located precisely—its entrance marked with a numerical rune that could unlock valuable diplomatic secrets. The crystalline vision floats above her palms, revealing winding roads and nestled dwellings along the hillsides. Her enchanted sight zooms closer as she traces the hidden pathways between estates. The magical markers on her map pulse brighter as she narrows her search, until finally, the numerical sigil above one particular doorway glows with confirmation. Another secret revealed by Eldoria’s master information seeker, who knows that even among a thousand similar dwellings, each bears a unique magical signature for those with eyes to see.

Blackfield - HTB

Mon, 28 Apr 2025 00:00:00 +0000

Details

URL	Hack The Box :: Blackfield
Difficulty	Hard
User Solves	153
Release Date	22 Aug, 2024

Recon

Rustscan & Nmap

Ran a quick Rustscan and fed the output into Nmap for a deeper scan.

└─$ python3 ./rs2nm.py 10.129.229.17
Just gonnae run a quick wee Rustscan test...
You selected: 10.129.229.17
Estimated Time Remaining: 1h 35m
Just kidding — only a few seconds!

OOoh, there are a few ports open:
(53, 88, 135, 389, 445, 5985)

Starting Nmap...

Nmap Results:

Lockpick 4.0 - HTB

Mon, 28 Apr 2025 00:00:00 +0000

Details

URL	Hack The Box :: Lockpick 4.0 Sherlock
Difficulty	Insane
User Solves	153
Release Date	22 Aug, 2024

Request to execute

1. Objective

The objective of this report is to analyse a malicious binary file suspected of being a trojan and to provide details regarding its behaviour, impact, and indicators of compromise (IOCs).

2. Triage

2.1 File Information

File Name: defenderscan.js
File Path: PWD
File Type: Javascript
File Hashes:
- MD5: 648C1A7E04B6260065115F93A760A354
- SHA256: 0fbb0dbcefd64bd68b73ac0cc347d4b8f684565c929c2005f660697dd3ea72ba
File Size: 126 KB
Timestamp Information:
- Creation Date: 02/07/2024
- Modification Date: 01/08/2024

2.2 VirusTotal Results

Link: VirusTotal - File - 0fbb0dbcefd64bd68b73ac0cc347d4b8f684565c929c2005f660697dd3ea72ba
Detection Ratio: 20/61
Common Classifications: Trojan | Ransomware | Downloader

2.3 Overview

The initial defenderscan.js file appears to leverage Windows ActiveX objects, specifically ADODB.Stream and WScript.Shell, to process binary data and execute a dynamically created PowerShell script.

Popcorn - HTB

Mon, 28 Apr 2025 00:00:00 +0000

Details

URL	Hack The Box :: Popcorn
Difficulty	Medium
User Solves	U: 12850 ~ R: 11863
Release Date	15 Mar, 2017

Introduction

Released on 15 March 2017, Popcorn is one of the earliest challenges on the Hack The Box platform. As a medium-difficulty Linux machine, it’s well-suited for users ready to transition from beginner boxes to more advanced, skill-testing scenarios.

First Steps

The first step is a comprehensive enumeration scan to quickly identify open ports and gather detailed service information. I use the following command:

Rustscan2NMap

Mon, 10 Jul 2023 00:00:00 +0000

Rustscan2NMap - Scan fast. Scan smart. Scan Scottish.

🛠️ Script Information

Rustscan2NMap is a cheeky wee Python script that blends the blistering speed of Rustscan with the depth and verbosity of NMap — saving you time and making scanning feel less like a chore and more like a dance.

With a touch of Scottish humour and a healthy dose of automation, this script:

Uses Rustscan to rapidly identify open ports
Passes those ports directly into NMap for full-blown enumeration
Logs output to a specified directory (or defaults to the current one)
Possibly saves you up to 10^5 seconds per scan. (Aye, possibly.)

⚙️ Dependencies

🦀 Rustscan
📡 NMap
🐍 Python 3+
🎨 colorama (or colourama, if you’re civilised)

💭 Suggested

🧠 A Brain (optional, but highly recommended)

▶️ How to Use

Arguments:

The Prober

Mon, 10 Jul 2023 00:00:00 +0000

Description

The Prober aims to be an all-in-one enumeration tool, like the Pea but potentially cooler.

Usage

Parameters

SaveLocation: Specifies the directory where results will be saved. Defaults to the current directory if not specified.
NoConfig: Switch to disable the creation of the configuration file.
Version: Displays the script version information.

Examples

.\pr0ber.ps1 -SaveLocation "C:\Scans" -NoConfig

Captures a variety of system information, saving results to the specified folder in separate files for each test and encodes the full output to B64 to easily get it off the box.

Mon, 01 Jan 0001 00:00:00 +0000

This is an about me page about me and only me