Blog

Titanic is an easy Linux machine that demonstrates a basic Arbitrary File Read vulnerability, Gitea hash cracking, and exploitation of a vulnerable version of ImageMagick.

404Gh0stFebruary 22, 20255 min read

• Linux
• Easy
• Arbitrary File Read
• Gitea
• ImageMagick

Coming Soon

404Gh0stFebruary 15, 20251 min read

• Windows
• Insane

Vintage is a challenging Active Directory machine characterized by disabled NTLM authentication, enabled antivirus protection, and complex security configurations. The machine involves exploiting a Pre-2000 computer account, leveraging multiple ACL/ACE vulnerabilities, decrypting Data Protection API (DPAPI) secrets, and manipulating Resource-Based Constrained Delegation.

404Gh0stJanuary 15, 202512 min read

• Windows
• Hard
• Active Directory
• Pre2K
• Kerberos
• DPAPI
• GenericWrite
• GenericAll
• Targeted ASREProasting
• RBCD