https://fieryrival.github.io/posts/ Recent content in Posts on Fieryrival's Blog https://fieryrival.github.io/%3Clink%20or%20path%20of%20image%20for%20opengraph,%20twitter-cards%3E https://fieryrival.github.io/%3Clink%20or%20path%20of%20image%20for%20opengraph,%20twitter-cards%3E Hugo -- 0.152.2 en-us Sun, 30 Nov 2025 00:00:00 +0000 https://fieryrival.github.io/posts/pilgrimage/ Sun, 30 Nov 2025 00:00:00 +0000 https://fieryrival.github.io/posts/pilgrimage/ Easy rated linux box from hackthebox comprising of .git directory, magick binary for file read and binwalk for privilege escalation. https://fieryrival.github.io/posts/monitorstwo/ Sun, 30 Nov 2025 00:00:00 +0000 https://fieryrival.github.io/posts/monitorstwo/ Easy rated linux box from hackthebox comprising of cacti, rce, and docker cve. https://fieryrival.github.io/posts/metatwo/ Sun, 30 Nov 2025 00:00:00 +0000 https://fieryrival.github.io/posts/metatwo/ Write-up for ‘MetaTwo’, a box that involves exploiting WordPress CVEs with multiple vectors (SQLi, XXE, LFI) for foothold, and then leveraging passpie for root privilege escalation. https://fieryrival.github.io/posts/visual/ Sun, 30 Nov 2025 00:00:00 +0000 https://fieryrival.github.io/posts/visual/ Medium rated Windows box from hackthebox that involves building a malicious .NET solution project for foothold, and exploiting ‘FullPowers’ via SeImpersonate for privilege escalation. https://fieryrival.github.io/posts/precious/ Sun, 30 Nov 2025 00:00:00 +0000 https://fieryrival.github.io/posts/precious/ Easy rated box from hackthebox comprising of a Ruby pdfkit RCE for foothold and a sudo misconfiguration for privilege escalation. https://fieryrival.github.io/posts/sau/ Sun, 30 Nov 2025 00:00:00 +0000 https://fieryrival.github.io/posts/sau/ Easy rated linux box from hackthebox comprising of an SSRF leading to RCE for foothold, and a systemctl less pager escape for privilege escalation. https://fieryrival.github.io/posts/soccer/ Sun, 30 Nov 2025 00:00:00 +0000 https://fieryrival.github.io/posts/soccer/ Easy rated linux box from hackthebox comprising sqli, tiny file manager rce and doas for privilege escalation. https://fieryrival.github.io/posts/busqueda/ Sun, 30 Nov 2025 00:00:00 +0000 https://fieryrival.github.io/posts/busqueda/ Easy rated linux box ‘Busqueda’ from hackthebox comprising of command injection for foothold, credentials reuse for internal subdomain and insecure code executing a relative path script as root leading to privilege escalation. https://fieryrival.github.io/posts/authority/ Thu, 20 Nov 2025 00:00:00 +0000 https://fieryrival.github.io/posts/authority/ Walkthrough of a medium-rated Windows AD box involving LDAP manipulation, cracking an Ansible vault, and escalating to Domain Admin via the AD CS ESC1 exploit. https://fieryrival.github.io/posts/interface/ Thu, 20 Nov 2025 00:00:00 +0000 https://fieryrival.github.io/posts/interface/ Easy rated linux box from hackthebox with hidden directories leading to RCE for foothold, and bash operator evaluation for privilege escalation. https://fieryrival.github.io/posts/active/ Thu, 20 Nov 2025 00:00:00 +0000 https://fieryrival.github.io/posts/active/ Easy rated windows AD box from hackthebox comprising GPP and kerberoasting. https://fieryrival.github.io/posts/pc/ Thu, 20 Nov 2025 00:00:00 +0000 https://fieryrival.github.io/posts/pc/ Easy rated linux box from hackthebox comprising of gRPC and SQLi for foothold, and a misconfigured Pyload for privilege escalation. https://fieryrival.github.io/posts/inject/ Thu, 20 Nov 2025 00:00:00 +0000 https://fieryrival.github.io/posts/inject/ Easy rated linux box from hackthebox with Springboot application for foothold and ansible for privilege escalation.