A beginner-friendly (and slightly painful) walkthrough of Hack The Box's Dante Pro Lab. Learn how I tackled pivoting, privilege escalation, and Active Directory challenges and what tools, tips, and...

Retro is an easy-rated VulnHub box where we chained privileges from an SMB guest login, changed the password of a pre-created computer account, and exploited the ESC1 ADCS vulnerability to escalat...

Baby2 is a medium level machine running on Windows Server. It contains a vulnerable GPO setting that allows us to escalate privileges to Domain Admin

An overview of the differences between Local File Inclusion (LFI) and file retrieval issues, including methods for chaining LFI vulnerabilities to achieve Remote Code Execution (RCE).

Chaining the ssti to rce in flask based web application where jinja2 template engine being used.