ryuki's blog

ryuki's blog

root

/

Capture The Flag

/

Hack The Box

/

Machines

/

Season 9

Season 9

Sep 20, 20251 min read

Season 9: Gacha from Hack The Box took place from the 20th of September to 13th of December and involved 13 machines.

4 items under this folder.

  • Feb 28, 2026

    Guardian

    • hackthebox
    • hard
    • linux
    • xss
    • csrf
    • local-file-read
    • idor
    • php-wrapper
    • php-filter
    • shared-library
    • python
    • xlsx
    • libreoffice
    • phpspreadsheet
    • CVE-2025-22131
    • T1059
    • T1059.006
    • T1078
    • T1078.003
    • T1110
    • T1110.002
    • T1129
    • T1190
    • T1203
    • T1552
    • T1552.001
    • T1552.008
  • Feb 21, 2026

    Giveback

    • hackthebox
    • linux
    • medium
    • kubernetes
    • runc
    • php
    • wordpress
    • CVE-2024-4577
    • CVE-2024-5932
    • T1068
    • T1078
    • T1078.003
    • T1190
    • T1528
    • T1611
  • Feb 07, 2026

    Signed

    • hackthebox
    • medium
    • windows
    • assume-breach
    • mssql
    • openrowset
    • ntlmrelayx
    • coerce
    • token
    • silver-ticket
    • rpcss
    • T1078
    • T1078.002
    • T1078.003
    • T1040
    • T1053
    • T1053.004
    • T1187
    • T1110
    • T1110.002
    • T1134
    • T1134.001
    • T1134.002
    • T1558
    • T1558.002
  • Jan 24, 2026

    Imagery

    • hackthebox
    • medium
    • linux
    • xss
    • local-file-read
    • path-traversal
    • aes
    • command-injection
    • cron
    • T1053
    • T1053.002
    • T1078
    • T1078.002
    • T1110
    • T1110.002
    • T1190

Created with ❤️ and Quartz

  • Mastodon
  • Bluesky
  • GitHub