Blog

Writeups for retired HackTheBox machines and Hack Smarter Labs, plus Malice, my series on malware development for adversary simulation. Everything here comes from lab work or authorized testing.

• Hack Smarter : MillenniumMediumWindows - Active Directory / 2026-11-05A medium difficulty AD box where SMB and LDAP are practically blocked, making most of your usual tools useless.
• Malice : Why Malware Development?pt.00 / 2026-11-01The scope, ground rules and roadmap for the Malice series.
• Hack Smarter : KitsuneEasyWindows - Active Directory / 2026-10-22Easy Active Directory box with ESC13, PowerShell object deserialization and Backup Operators abuse to dump NTDS.
• HTB : CheckpointMediumWindows - Active Directory / 2026-09-11My first ever AD box, featuring two BadSuccessors, a malicious VS extension and extracting TGTs from a memory snapshot.
• Hack Smarter : CasinoMediumLinux / 2026-08-24Casino is a Medium difficulty Linux lab featuring SSTI for RCE, bash history revealing passwords and plaintext root password in logs.
• HTB : HelixMediumLinux / 2026-06-17A box featuring NiFi abuse for RCE, ICS abuse for privileged shell.
• HTB : ReactorEasyLinux / 2026-06-17Easy Season 11 HTB Machine
• HTB : CCTVEasyLinux / 2026-05-07First ever writeup, check others for better quality
• HTB : SilentiumEasyLinux / 2026-05-07An easy linux box featuring ATO, RCE and a Gogs RCE via symlink path traversal.
• HTB : VariaTypeMediumLinux / 2026-05-07Medium Linux box featuring LFI, evil fonts and sudo abuse.