skip to content
~/bokkapig
_
hack the box machine writeups
[1]
machines
[2]
refs
[3]
cheatsheet
[4]
search
[5]
pdf-inject
ls ./tags
[213]
Docker
6
RCE
6
Active-Directory
5
Local Privilege Escalation
5
Password Reuse
5
Command Injection
4
Sudo
4
LFI
3
Arbitrary File Write
2
BadSuccessor
2
Default Credentials
2
DMSA
2
Hashcat
2
MCP
2
MSSQL
2
Path-Traversal
2
PHP-Injection
2
Pre-Auth RCE
2
Privilege-Escalation
2
.NET Reversing
1
Account Takeover
1
AD CS
1
Aggressive-Mode
1
Anonymous Export
1
Apache
1
Apache CXF
1
Apache NiFi
1
Arcane
1
Asterisk
1
Auth Bypass
1
Backup-Operators
1
Bash Arithmetic Evaluation
1
Bcrypt
1
Cacti
1
CamaleonCMS
1
Chrome DevTools Protocol
1
Chrome Extension
1
CMap
1
Cookie-Manipulation
1
Credential Disclosure
1
Credential Dump
1
Credential Looting
1
Credential Manager
1
Credential Sniffing
1
Cron
1
Custom MCP
1
CVE-2023-34468
1
CVE-2023-43208
1
CVE-2024-46987
1
CVE-2024-54146
1
CVE-2025-24367
1
CVE-2025-32463
1
CVE-2025-4517
1
CVE-2025-47812
1
CVE-2025-49132
1
CVE-2025-53779
1
CVE-2025-55182
1
CVE-2025-58434
1
CVE-2025-59528
1
CVE-2025-6018
1
CVE-2025-6019
1
CVE-2025-64512
1
CVE-2025-66034
1
CVE-2025-66478
1
CVE-2025-69212
1
CVE-2025-8110
1
CVE-2025-9074
1
CVE-2026-23744
1
CVE-2026-23760
1
CVE-2026-26119
1
CVE-2026-27626
1
CVE-2026-39987
1
CVE-2026-41651
1
CWE-502
1
Database Manipulation
1
DCSync
1
DNS Poisoning
1
Docker Desktop Escape
1
DPAPI
1
ESC1
1
Esm.sh
1
Evil-Twin
1
Facter Sudo Abuse
1
File Descriptor Leak
1
File-Upload
1
Flask
1
Flowise
1
FontForge
1
Fonttools
1
ForceChangePassword
1
FreePBX
1
FTP
1
Git Hooks
1
Git-Exposure
1
Gitea
1
Gogs
1
H2 JDBC
1
Hidden API Tool
1
HL7/MLLP
1
Hostapd-Wpe
1
Hoverfly
1
ICS/OT
1
IDOR
1
Ike
1
Ikev1
1
Insecure Deserialization
1
Ipsec
1
Java Code Injection
1
Jupyter
1
Ldap
1
Linked Server
1
LPD
1
Lua Injection
1
Machine Learning
1
Marimo
1
MCPJam
1
MD5
1
Memory Forensics
1
Middleware RCE
1
MinIO
1
Mirth Connect
1
MONAI
1
MotionEye
1
MSCHAPv2
1
MTOM
1
MySQL Looting
1
Next.js
1
NFS
1
Node.js Inspector
1
Nss-Injection
1
OliveTin
1
OPC UA
1
OpenSTAManager
1
OpenSUSE
1
OS Command Injection
1
P7M
1
PackageKit
1
PAM Bypass
1
Pass-the-Hash
1
Password Cracking
1
Password Reset Token Disclosure
1
Password-Must-Change
1
PATH_MAX
1
PBKDF2
1
PDF Cracking
1
Pdf2txt
1
Pdfminer.six
1
PEAP
1
Pearcmd
1
Phantom Certificate Template
1
Pickle Deserialization
1
PJL
1
Polkit
1
Polyglot
1
Port Forwarding
1
PrivateBin
1
Psk
1
Pterodactyl Panel
1
Pypykatz
1
Python Eval() Injection
1
Python Pyc Injection
1
PyTorch
1
Race Condition
1
React Server Components
1
React2Shell
1
Reversible Password Storage
1
RFC 1179
1
Roundcube
1
RUNSCRIPT
1
Safety Interlock Abuse
1
SCM_RIGHTS
1
Sebackupprivilege
1
Setuptools
1
SmarterMail
1
SNMP
1
SOAP
1
SQL Impersonation
1
SQL Injection
1
SQLi
1
SQLite
1
SSH Key Cracking
1
SSH Key Disclosure
1
SSH Key Injection
1
SSH Tunnel
1
SSRF
1
Sudo Abuse
1
SUID
1
Symlink Path Traversal
1
Sysadmin Hook
1
Systemd Timer
1
Tarfile Filter Bypass
1
TOCTOU
1
Token Leak
1
Tombstone Reanimation
1
Udisks2
1
Unauthenticated RCE
1
Vhost
1
Volatility3
1
VS Code VSIX
1
WCF
1
WebSocket
1
WiFi
1
Windows Admin Center
1
Windows Server 2025
1
Windows-Server-2022
1
Wing FTP Server
1
WinRM
1
World-Writable Binary
1
WPA-Enterprise
1
XFS
1
XStream Deserialization
1
XXE
1
ZoneMinder
1
← cd ..