Search
HTB: Reactor Writeup | thepentesting.ninja

🔒 Protected Content

This post is password protected. Please enter the password to view the content.

Incorrect password. Please try again.

Connect With Me

HTB: Reactor Writeup

HTB: Reactor Writeup

thepentesting.ninja's Picture
thepentesting.ninja in reactor htb hackthebox linux reactor.htb

You may also like

WebVerse Pro: BedRock Writeup
17 min read

WebVerse Pro: BedRock Writeup

Six services, four languages, one engagement. BedRock is a sprawling property-management WebRange where the bugs live in the seams

thepentesting.ninja's Picture
thepentesting.ninja in bedrock webverse writeup linux web ssrf nosql-injection cve-2023-38646 idor
HTB: Redelegate Writeup
19 min read

HTB: Redelegate Writeup

Hard Windows Active Directory box involving FTP enumeration, KeePass cracking, MSSQL credential abuse, ForceChangePassword ACL exploitation, and constrained delegation abuse to achieve DCSync.

thepentesting.ninja's Picture
thepentesting.ninja in redelegate htb windows active-directory kerberos constrained-delegation mssql keepass
HackSmarter: Samurai Writeup
7 min read

HackSmarter: Samurai Writeup

Samurai is a Linux machine featuring a Joomla 4.2.5 instance vulnerable to CVE-2023-23752, leaking database credentials and sensitive information granting admin access, leading to RCE and a command injection privesc via a SUID-like custom binary.

thepentesting.ninja's Picture
thepentesting.ninja in samurai hacksmarter linux joomla cve-2023-23752 command-injection sudo rce

Latest Posts

HackSmarter: Martini Writeup
12 min read

HackSmarter: Martini Writeup

thepentesting.ninja's Picture
thepentesting.ninja
WebVerse Pro: BedRock Writeup
17 min read

WebVerse Pro: BedRock Writeup

thepentesting.ninja's Picture
thepentesting.ninja

Explore Tags

acl-abuse active-directory adcs administrator ai ansible-vault api apisec asreproasting atlantis authentication-bypass authority badsuccessor bash-injection bedrock bloodhound browsed bscp burpsuite bytecode-poisoning capenx cbbh certifications charcol citycouncil codeparttwo command-injection constrained-delegation conversor craft crushftp cspt ctf cve cve-2019-12840 cve-2023-23752 cve-2023-38646 cve-2024-30088 cve-2024-4577 cve-2024-5932 cve-2025-31161 cve-2026-29000 cwes darkzero dcsync dns docker dom-poisoning dpapi easy eighteen erlang esc1 esc4 esc8