https://chvxt3r.github.io/Just your average SysAdmin turned CyberSecurity enthusiast 2025-12-07T08:00:53-08:00 chvxt3r https://chvxt3r.github.io/ Jekyll © 2025 chvxt3r /assets/img/favicons/favicon.ico /assets/img/favicons/favicon-96x96.png 2025-12-05T16:00:00-08:00 2025-12-06T10:36:10-08:00 https://chvxt3r.github.io/posts/trick/ chvxt3r

Trick is an easy box exploiting a local file inclusion, email, and php to gain a shell, and then sudo priviliges to escalate to root.

2025-12-03T08:00:00-08:00 2025-12-03T08:52:57-08:00 https://chvxt3r.github.io/posts/Return/ chvxt3r

In Return, we abuse a printer config to gain access

2025-12-02T08:00:00-08:00 2025-12-02T10:01:09-08:00 https://chvxt3r.github.io/posts/PNPTReview/ chvxt3r

My thoughts and experience on the PNPT exam.

2025-10-22T23:10:00-07:00 2025-12-06T10:50:41-08:00 https://chvxt3r.github.io/posts/Jeeves/ Chvxt3r

Jeeves Overview Jeeves is not overly complicated, however it focuses on some interesting techniques and provides a great learning experience. As the use of alternate data streams is not very common, some users may have a hard time locating the correct escalation path. Initial Recon We’re going to start with our normal nmap scan sudo nmap -sCV -T4 -p- 10.129.59.102 --open -oA scans/nmap_initial...

2025-10-16T23:10:00-07:00 2025-12-06T10:50:41-08:00 https://chvxt3r.github.io/posts/Chatterbox/ Chvxt3r

Chatterbox by Hack The Box Overview *Chatterbox is a medium difficulty machine that features an exploit in in a chat system to gain initial access, and from there we can discover credentials that will leed us to root. I don’t know if this was a medium box back in the day it was released, but it’s pretty cake now. Enumeration We start with our normal nmap scan, looking for anything interest...