Search
HTB: Facts Writeup | thepentesting.ninja

🔒 Protected Content

This post is password protected. Please enter the password to view the content.

Incorrect password. Please try again.

Connect With Me

HTB: Facts Writeup

HTB: Facts Writeup

thepentesting.ninja's Picture
thepentesting.ninja in facts htb hackthebox linux facts.htb

You may also like

HackTheBox: Trick Writeup
12 min read

HackTheBox: Trick Writeup

Trick is an easy Linux machine on HackTheBox combining DNS zone transfer enumeration, SQL injection, local file inclusion, and SMTP mail poisoning for foothold, then abusing a writable fail2ban action directory to escalate to root.

thepentesting.ninja's Picture
thepentesting.ninja in trick hackthebox linux dns sqli lfi smtp fail2ban
HackTheBox: Postman Writeup
9 min read

HackTheBox: Postman Writeup

Postman is an easy Linux box featuring an unauthenticated Redis instance, SSH key injection for initial access, a crackable encrypted private key, and a Webmin RCE vulnerability for root.

thepentesting.ninja's Picture
thepentesting.ninja in postman hackthebox linux redis webmin cve-2019-12840 ssh john
HTB: Gavel Writeup
9 min read

HTB: Gavel Writeup

Gavel is a medium Linux machine featuring an exposed .git repository, a creative backtick-based SQL injection, PHP rule code execution via an admin panel, and a custom YAML-driven privilege escalation.

thepentesting.ninja's Picture
thepentesting.ninja in gavel htb linux sql-injection git-exposure php suid privilege-escalation

Latest Posts

HackTheBox: Trick Writeup
12 min read

HackTheBox: Trick Writeup

thepentesting.ninja's Picture
thepentesting.ninja
HackTheBox: Postman Writeup
9 min read

HackTheBox: Postman Writeup

thepentesting.ninja's Picture
thepentesting.ninja

Explore Tags

active-directory adcs ai api apisec atlantis authentication-bypass bscp burpsuite capenx cbbh certifications charcol citycouncil codeparttwo command-injection crushftp cspt ctf cve-2019-12840 cve-2024-4577 cve-2024-5932 cve-2025-31161 cve-2026-29000 cwes dns docker dom-poisoning dpapi easy erlang exception expressway fail2ban gavel git-exposure gitea gitoops giveback hacksmarter hackthebox htb ike isakmp john js2py jwt kerberoasting kerberos kubernetes lfi linux medium mssql nosql-injection npbackup ntds ntlm-reflection ntlm-relay ntlm-theft offsec oscp pac4j password-cracking pentesting php portswigger postman principal privilege-escalation psk-cracking rce redis restore-ad-object review runc s3 sandbox-escape seimpersonateprivilege signed smtp soulmate sql-injection sqli ssh ssh-certificate ssrf sudo-privesc suid terraform trick unicode-bypass upctf2026 voleur web webapp webmin welcome whoami windows writespn writeup xss xstf