Nigerald's Blog

Sizzle is an insane level box on HackTheBox and utilizes a variety of Active Directory and Windows pentesting techniques in order to obtain Domain Admin. The route to an initial shell was quite difficult and unique, but the rest of the box was relatively simple. [Read More]

My OSCP journey began when I began cybersecurity, 9 months ago. Back then I didn’t know how to change directories or read files in Linux, let alone what Kali Linux was. I didn’t even consider cybersecurity as a potential career path and was unaware of the existence of offensive security... [Read More]

Iptables is a common and powerful tool, and one of its use cases is to create firewalls on Linux systems. It’s syntax, from an initial glance, is very complicated. This post aims to clarify the syntax of this tool and make it easier to use. With some quick practice, using... [Read More]

Bankrobber is an insane level box on HackTheBox that utilizes a client side attack and SQL injection and a simple buffer overflow. User was lengthy as it required a lot of waiting and inconsistency, but the path of System was very quick and simple. [Read More]

Worker is a medium level box on HackTheBox and is unique because its usage of the DevOps workflow as an attack vector. Getting both user and System required either knowledge of Azure DevOps or some considerable enumeration, but everything else was not too difficult. [Read More]