jarednexgent

Video guide for Live Box "Driver" --- Stealing NTLMv2 hash with malicious .SCF file + Responder and Privilege Escalation via CVE-2021-1675 PrintNightmare

Video Guide for Retired Box "Bashed" --- having fun with Web Shells, Python Reverse Shells, and Abusing Cron Jobs!

Video Walkthrough for retired box "Shocker" --- Checking for Vulnerabilities with Nmap, Gaining a foothold with Shellshock/Bashdoor, and Privilege Escalation via Sudo Abuse/GTFOBins.

Video Guide for retired box "Heist" --- Cracking Hashes, Enumerating Users/SIDs with RPCClient , and Escalating Privilege via Process Dump File Analysis!

Video Guide for retired box "Popcorn" --- Uploading/Manipulating File Content Type with Burpsuite and Escalating Privilege via "Firefart" Kernel Exploit

Video guide for HTB Academy Module: Login Bruteforcing

Video guide for retired box "Valentine" --- utilizes Heartbleed exploit, broken RSA Key authentication, and Linux Privilege Escalation.

Note: Medium Lab can be solved using command: nmap -sSU -p53 <ip address> --script=dns-nsid When interacting with an actual IDS I would avoid the -A switch, and instead recommend some combination of the following: -T 0 (paranoid timing), -f (fragmented packets), -D (specify a decoy source IP address), --data-length 200, and -g (use source port of a common network protocol like DNS/DHCP).

Video guide on retired box "Jerry" --- Sensitive Information exposed via Tomcat Webserver leads to File Upload Attack.