Reviving GLPI Agent Abuse with ESC17 ↗ ↖
This article explores how ESC17 certificate abuse revives an old GLPI agent tactic, enabling attackers to achieve RCE without needing access to the GLPI server.
Active Directory
"NanoCorp" by Hack The Box - A "Hard" Linux Box Writeup
Here is a Writeup of the Hard NanoCorp HTB box.
"Signed" by Hack The Box - A "Medium" Windows Box Writeup
Here is a Writeup of the Medium Signed HTB box.
"DarkZero" by Hack The Box - A "Hard" Windows Box Writeup
Here is a Writeup of the Hard DarkZero HTB box.
"Fluffy" by Hack The Box - An "Easy" Linux Box Writeup
Here is a Writeup of the Easy Fluffy HTB box.
"Puppy" by Hack The Box - A "Medium" Linux Box Writeup
Here is a Writeup of the Medium Puppy HTB box.
"The Frizz" by Hack The Box - A "Medium" Linux Box Writeup
Here is a Writeup of the Medium The Frizz HTB box.
Use DNSchef to solve bloodhound connectivity issues with LDAP timeouts
Here is a short tutorial on how to use DNSchef to solve bloodhound connectivity issues with LDAP timeouts, especially over proxies
"Ghost" by Hack The Box - An Insane Windows Box Writeup
Here is a Writeup of the now retired Insane Ghost HTB box.