✍️ Writeups and Walkthroughs

Try Hack Me (THM)

tryhackme.com - © TryHackMe

Rooms

• OWASP
• Active Directory Basics (This room will introduce the basic concepts and functionality provided by Active Directory)
• Breaching Active Directory (This network covers techniques and tools that can be used to acquire that first set of AD credentials that can then be used to enumerate AD)
• Enumerating Active Directory (This room covers various Active Directory enumeration techniques, their use cases as well as drawbacks)
• Attacktive Directory (99% of Corporate networks run off of AD. But can you exploit a vulnerable Domain Controller?)
• Post-Exploitation Basics (Learn the basics of post-exploitation and maintaining access with mimikatz, bloodhound, powerview and msfvenom)

CTFs

• RootMe
• Simple CTF
• Eternal Blue
• Vulnversity
• Pickle Rick
• Brooklyn Nine Nine
• Kenobi
• Bounty Hacker
• Overpass
• LazyAdmin
• Ignite
• Bolt
• Agent Sudo
• Startup
• Wgel
• Blog
• ColdBox
• Lian_Yu
• Blaster
• Ice

---

Hack The Box (HTB)

hackthebox.com - © HACKTHEBOX

• Devel
• Bank
• Delivery
• Active
• Analytics
• Bashed
• Valentine
• Sau
• Sunday
• Cap
• Celestial - OnGoing
• Poison - OnGoing

---

VulnHub

https://www.vulnhub.com/

• Brainpain (BoF)

---

DockerLabs

https://dockerlabs.es/

• Trust
• Upload
• Vacaciones

---

DVWA - Web

https://github.com/digininja/DVWA

• Install and configure DVWA
• Command Injection
• Cross Site Request Forgery (CSRF)
• File Inclusion (LFI + RFI)
• SQL Injection (SQLi)

OWASP Mutillidae II - Web

https://owasp.org/www-project-mutillidae-ii/

• Install and configure OWASP Mutillidae II

OWASP SecureBank - Web

https://owasp.org/www-project-securebank/

• Install and configure OWASP Secure Bank