Search
HTB: Gavel Writeup | thepentesting.ninja

🔒 Protected Content

This post is password protected. Please enter the password to view the content.

Incorrect password. Please try again.

Connect With Me

HTB: Gavel Writeup

HTB: Gavel Writeup

thepentesting.ninja's Picture
thepentesting.ninja in gavel htb hackthebox linux gavel.htb

You may also like

HackTheBox: Expressway Writeup
8 min read

HackTheBox: Expressway Writeup

Easy Linux box involving UDP enumeration, IKE Aggressive Mode PSK capture and cracking, SSH foothold, and privilege escalation via CVE-2025-32462 sudo hostname bypass.

thepentesting.ninja's Picture
thepentesting.ninja in expressway hackthebox linux easy ike isakmp psk-cracking sudo-privesc
HackSmarter: Exception Writeup
20 min read

HackSmarter: Exception Writeup

Medium Linux box from HackSmarter. Exploit CVE-2021-22911 NoSQL injection in Rocket.Chat 3.12.1 to achieve RCE, find database credentials in a leftover backup file that works for SSH, and escalate via a misconfigured sudo rule.

thepentesting.ninja's Picture
thepentesting.ninja in exception hacksmarter linux medium rce nosql-injection docker privilege-escalation
HTB: Giveback Writeup
14 min read

HTB: Giveback Writeup

Giveback is a medium Linux machine involving a GiveWP PHP Object Injection RCE, pivoting through Kubernetes pods via chisel, exploiting PHP-CGI parameter injection, and escaping to root via a runc wrapper misconfiguration

thepentesting.ninja's Picture
thepentesting.ninja in giveback htb linux kubernetes cve-2024-4577 runc cve-2024-5932

Latest Posts

HackTheBox: Expressway Writeup
8 min read

HackTheBox: Expressway Writeup

thepentesting.ninja's Picture
thepentesting.ninja
HackSmarter: City Council Writeup
19 min read

HackSmarter: City Council Writeup

thepentesting.ninja's Picture
thepentesting.ninja

Explore Tags

active-directory adcs ai api apisec atlantis bscp burpsuite capenx cbbh certifications charcol citycouncil codeparttwo command-injection crushftp ctf cve-2024-4577 cve-2024-5932 cve-2025-31161 cwes docker dpapi easy erlang exception expressway gitea gitoops giveback hacksmarter hackthebox htb ike isakmp js2py kerberoasting kerberos kubernetes lfi linux medium mssql nosql-injection npbackup ntds ntlm-reflection ntlm-relay ntlm-theft offsec oscp password-cracking pentesting portswigger privilege-escalation psk-cracking rce restore-ad-object review runc s3 sandbox-escape seimpersonateprivilege signed soulmate sudo-privesc terraform voleur web webapp welcome whoami windows writespn writeup xss