https://thacklab.github.io/HackTheBox, TryHackMe, and offensive security walkthroughs 2025-12-20T18:39:27+10:00 ThackLab https://thacklab.github.io/ Jekyll © 2025 ThackLab /assets/img/favicons/favicon.ico /assets/img/favicons/favicon-96x96.png 2025-12-20T18:30:00+10:00 2025-12-20T18:30:00+10:00 https://thacklab.github.io/posts/thm-AgentT/ ThackLab

Description: This lab showcases a PHP backdoor which allows RCE. Phase 1: Recon ❯ sudo nmap -T4 -A -p80 10.48.160.174 PORT STATE SERVICE VERSION 80/tcp open http PHP cli server 5.5 or later (PHP 8.1.0-dev) |_http-title: Admin Dashboard OS details: Linux 4.15 - 5.19 PHP 8.1.0-dev is interesting. Lets see if it has any exploits. searchsploit 8.1.0-dev ...

2025-12-19T12:34:00+10:00 2025-12-19T16:23:15+10:00 https://thacklab.github.io/posts/thm-Corridor/ ThackLab

SUMMARY: Corridor is a web based, IDOR lab where initial recon on the website shows an interactive corridor and the corrosponding hashes to each door. There are 13 doors in total with the first hash being the integer “1”. Developers start counting from 0 so we MD5 hashed it and navigated to it, giving us the flag. Website: Source Code: Flag: Thats all folks! Room: C...

2025-12-18T12:34:00+10:00 2025-12-18T18:21:11+10:00 https://thacklab.github.io/posts/thm-Steel-Mountain/ ThackLab

“Hack into a Mr. Robot themed Windows machine. Use metasploit for initial access, utilise powershell for Windows privilege escalation enumeration and learn a new technique to get Administrator access.” Phase 1: Information gathering Nmap scans revealed the following: PORT STATE SERVICE VERSION ================================================================== 80 open ...

2025-12-17T12:07:00+10:00 2025-12-17T12:07:00+10:00 https://thacklab.github.io/posts/thm-Takeover/ ThackLab

This challenge revolves around subdomain enumeration. If you’re still abit “FUZZY” on url’s, i’ve got a breakdown below. Phase 1: Information Gathering Standard port & service scan yielded: PORT STATE SERVICE VERSION ================================================================== 22 open ssh OpenSSH 8.2p1 Ubuntu 4ubuntu0.13 (Ubuntu 80 o...

2025-12-17T06:00:00+10:00 2025-12-18T03:37:46+10:00 https://thacklab.github.io/posts/thm-lookback/ ThackLab

You’ve been asked to run a vulnerability test on a production environment. Phase 1: Information Gathering Standard scanning and enumeration yeilded: PORT STATE SERVICE VERSION 80/tcp open http Microsoft IIS httpd 10.0 |_http-title: Site doesn't have a title. |_http-server-header: Microsoft-IIS/10.0 443/tcp open ssl/https |_http-server-header: Microsoft-IIS/10.0 | ssl...