A HIGH OS Command Injection (CWE-78) in the KaliFast Git remote configuration endpoint. The ei_git_repo_url parameter is passed unsanitized to a shell function, allowing any authenticated user (free registration) to execute arbitrary commands as www-data on the server.

Abstract The Windows Anti-Malware Scan Interface (AMSI) is a bridge between script-execution engines and installed antivirus products. This post documents only the bypass techniques that matter fo...

Dracarys is the latest GOAD lab made by MayFly, featuring some spicy Kerberos delegation abuse and a fun Linux privesc technique I hadn’t seen before. The lab consists of three machines joined to ...

I thought I had skilled issued again. Reread my commands. I checked the registry. Restarted ntlmrelayx. Went through the entire checklist. It turned out it wasn’t me this time. When the victim DC ...

Auteur: Evariste (@bl4ckarch) Date: Janvier 2026 Difficulté: Hard Lab: PIRATES.BRB (basé sur Barbhack 2025) Créateurs originaux: @mpgn, @mael91620 Solution Released SOON!!

Mythical is an intermediate mini pro lab on Hack The Box (originally a chain on Vulnlab) created by XCT. This lab simulates an assumed breach scenario where we already have a Mythic C2 agent runni...

Unintended is an intermediate mini pro lab on Hack The Box (originally a medium difficulty chain on Vulnlab) created by kavigihan. It consists of three Linux machines: 10.13.38.57 - DC (Domain C...

A complete journey from understanding Named Pipes to building an undetectable PrintSpoofer learning Windows internals, token impersonation, RPC, and evasion techniques along the way.

HackSmarter - Welcome Lab Writeup Difficulté: Easy Auteur: Noah Heroldt Date: 07 Novembre 2025 Scenario Vous êtes membre de l’équipe Red Team de Hack Smarter. Lors d’un engagement de phishing, v...

Executive Summary In this Red Team lab exercise, we successfully demonstrated the complete attack chain of compromising an Android device using a malicious APK delivered through a phishing scenari...