Search
HTB: Checkpoint Writeup | thepentesting.ninja

🔒 Protected Content

This post is password protected. Please enter the password to view the content.

Incorrect password. Please try again.

Connect With Me

HTB: Checkpoint Writeup

HTB: Checkpoint Writeup

thepentesting.ninja's Picture
thepentesting.ninja in checkpoint htb hackthebox windows checkpoint.htb

You may also like

HTB: Helix Writeup
14 min read

HTB: Helix Writeup

Medium Linux box featuring Apache NiFi CVE-2023-34468 for initial access, SSH key recovery for a foothold, and OPC-UA industrial protocol manipulation to trigger a privileged maintenance console.

thepentesting.ninja's Picture
thepentesting.ninja in helix htb linux medium nifi opcua cve-2023-34468 ics
HTB: Kobold Writeup
11 min read

HTB: Kobold Writeup

Kobold is an easy Linux machine featuring an MCPJam inspector RCE, a PrivateBin template cookie LFI for container escape, and Docker API abuse to reach root.

thepentesting.ninja's Picture
thepentesting.ninja in kobold hackthebox linux easy web docker rce lfi
HTB: NanoCorp Writeup
12 min read

HTB: NanoCorp Writeup

NanoCorp is a Windows AD box: a job-application zip upload leaks an NTLM hash via CVE-2025-24071, AD group abuse pivots accounts, and an NTLM reflection trick (CVE-2025-33073) lands a privileged DC shell.

thepentesting.ninja's Picture
thepentesting.ninja in nanocorp htb windows active-directory ntlm-reflection kerberos coerce CVE-2025-24071 CVE-2025-33073

Latest Posts

HackSmarter: Casino Writeup
19 min read

HackSmarter: Casino Writeup

thepentesting.ninja's Picture
thepentesting.ninja
HTB: Helix Writeup
14 min read

HTB: Helix Writeup

thepentesting.ninja's Picture
thepentesting.ninja

Explore Tags

linux htb hackthebox windows active-directory writeup hacksmarter medium rce kerberos mssql easy ctf adcs web lfi kerberoasting command-injection webverse ssrf review docker certifications webapp sqli privilege-escalation idor xss sudo sql-injection race-condition path-traversal ntlm-theft ntlm-reflection nosql-injection mass-assignment keepass hard gogs esc8