HackTheBox: Magic

This writeup details the exploitation of web vulnerabilities on HackTheBox Magic, including SQL injection, path manipulation, and privilege escalation.

July 5, 2025 · 3 min · Bhav Goyal

HackTheBox: Fluffy

This writeup demonstrates enumeration and exploitation of AD and certificate services on HackTheBox Fluffy, including shadow credentials and privilege escalation.

June 10, 2025 · 5 min · Bhav Goyal

HackTheBox: Administrator

This writeup details the enumeration and exploitation of AD services on HackTheBox Administrator, including credential attacks and privilege escalation.

June 1, 2025 · 3 min · Bhav Goyal

HackTheBox: Puppy

This writeup covers the exploitation of DPAPI and Active Directory on HackTheBox Puppy, including credential extraction and privilege escalation.

May 21, 2025 · 4 min · Bhav Goyal

HackTheBox: EscapeTwo

This writeup demonstrates enumeration and exploitation of AD and Windows services on HackTheBox EscapeTwo, including credential attacks and privilege escalation.

April 28, 2025 · 6 min · Bhav Goyal