Machine Difficulty OS Release Puppy Medium Windows 18 May 2025 Machine Information As is common in real life pentests, you will start the Puppy box...

Machine Difficulty OS Release Fluffy Easy Window 25 May 2025 Machine Information As is common in real life Windows pentests, you will start the Flu...

Machine Difficulty OS Release Planning Easy Linux 11 May 2025 Machine Information As is common in real life pentests, you will start the Planning b...

This blog covers all web application challenges from the BlackHat 2025 Qualification Round. Each challenge contains a description, the vulnerable code, and steps to exploit it. It serves as a compl...

Machine Difficulty OS Release Environment Medium Linux 04 May 2025 Recon Start off with an Nmap scan. IP=10.10.11.67 port=$(sudo nmap -p- $IP --m...

Machine Difficulty OS Release TheFrizz Medium Windows 16 Mar 2025 Recon Start with an Nmap scan nmap -sV 10.10.11.60 ┌──(kali㉿kali)-[~] └─$ nmap...

Machine Difficulty OS Release Eureka Hard Linux 27 Apr 2025 Recon Started off with an Nmap scan. IP=10.10.11.66 port=$(sudo nmap -p- $IP --min-ra...

What is a Logon Script? A logon script is executed automatically when a user logs into a system. It is commonly used in Active Directory environments to perform actions like mapping network drives...

Misconfigurations in Active Directory Certificate Services (AD CS) can enable low-privileged users to escalate their privileges within an Active Directory environment. While there is limited detail...

Step1: Login with the given credentials Send the request to the repeater Here, we can see that there is no cache support for this request because there is no header in the response, such as:...