Attack Paths

Low-Level Vulnerability Leads to Domain Compromise

Low-Level Vulnerability Leads to Domain Compromise

NodeZero compromised HTB’s Mirai machine by using default SSH creds for user pi, then escalated to root via unrestricted sudo…

The Jerry machine from the Hack The Box platform nicely illustrates the danger of weak and default credentials.

NodeZero compromises the "Active" machine on Hack The Box by chaining classic Active Directory vulnerabilities: GPP password exposure, Kerberoasting, and…

NodeZero exploited EternalBlue on HTB’s Blue machine to gain system access and dump credentials, showing the risk of unpatched SMB…