hackthebox

In this machine I learned about nginx misconfigurations, LDAP enumeration, log poisoning and perl command injections.

Simple machine to learn about JWT signing and root privileged core dumps to read file contents.

This machine teaches about recovering gzip files, some basics of OneTimePasswords, exploiting xdebug and path injection.

Simple machine with a lot of OSINT and an easy bash command injection.

Machine that can be solved with a bit of OSINT.* *It teaches about Chrome extensions PGP keys and Server Side Template Injection.