Guessing Game 2

August 1, 20254 minutes

Restaurant

leak libc & ret2libc

June 30, 20254 minutes

October

In this machine we exploit OctoberCMS with default credentials and a file upload that bypasses an extension check. For privilege escalation we perform a buffer overflow with a technique called ret2libc, with ASLR (Address Space Layout Randomization) enabled

March 27, 202410 minutes

Enterprise

In this writeup we solve the Enterprise machine from HackTheBox. It is a very interesting medium machine: we cover WordPress and Joomla web enumeration and SQL injections, escape from a Docker container and finally exploit a very interesting buffer overflow with the ret2libc technique

November 11, 202327 minutes