Search
HTB: Enigma Writeup | thepentesting.ninja

🔒 Protected Content

This post is password protected. Please enter the password to view the content.

Incorrect password. Please try again.

Connect With Me

HTB: Enigma Writeup

HTB: Enigma Writeup

thepentesting.ninja's Picture
thepentesting.ninja in enigma htb hackthebox linux enigma.htb

You may also like

HackSmarter: Casino Writeup
19 min read

HackSmarter: Casino Writeup

A HackSmarter Medium Linux box: a leaked JS sourcemap exposes an unauthenticated API leaking guest logins, a Jinja2 SSTI gives RCE, and a misconfigured SSH key and a leaked log lead to root.

thepentesting.ninja's Picture
thepentesting.ninja in casino hacksmarter linux ssti broken-access-control credential-exposure misconfiguration
HTB: Helix Writeup
14 min read

HTB: Helix Writeup

Medium Linux box featuring Apache NiFi CVE-2023-34468 for initial access, SSH key recovery for a foothold, and OPC-UA industrial protocol manipulation to trigger a privileged maintenance console.

thepentesting.ninja's Picture
thepentesting.ninja in helix htb linux medium nifi opcua cve-2023-34468 ics
HTB: Kobold Writeup
11 min read

HTB: Kobold Writeup

Kobold is an easy Linux machine featuring an MCPJam inspector RCE, a PrivateBin template cookie LFI for container escape, and Docker API abuse to reach root.

thepentesting.ninja's Picture
thepentesting.ninja in kobold hackthebox linux easy web docker rce lfi

Latest Posts

HackSmarter: Casino Writeup
19 min read

HackSmarter: Casino Writeup

thepentesting.ninja's Picture
thepentesting.ninja
HTB: Helix Writeup
14 min read

HTB: Helix Writeup

thepentesting.ninja's Picture
thepentesting.ninja

Explore Tags

linux htb hackthebox windows active-directory writeup hacksmarter medium rce kerberos mssql easy ctf adcs web lfi kerberoasting command-injection webverse ssrf review docker certifications webapp sqli privilege-escalation idor xss sudo sql-injection race-condition path-traversal ntlm-theft ntlm-reflection nosql-injection mass-assignment keepass hard gogs esc8