ryuki's blog

ryuki's blog

root

/

Capture The Flag

/

Hack The Box

/

Machines

/

Season 9

Season 9

Sep 20, 20251 min read

Season 9: Gacha from Hack The Box took place from the 20th of September to 13th of December and involved 13 machines.

8 items under this folder.

  • Apr 11, 2026

    Eighteen

    • hackthebox
    • easy
    • windows
    • assume-breach
    • pbkdf2
    • mssql
    • dmsa
    • badsuccessor
    • password-spray
    • T1078
    • T1078.002
    • T1098
    • T1110
    • T1110.002
    • T1110.003
  • Apr 04, 2026

    DarkZero

    • hackthebox
    • hard
    • windows
    • assume-breach
    • coerce
    • dcsync
    • mssql
    • adcs
    • linked-database
    • SigmaPotato
    • rubeus
  • Mar 21, 2026

    Conversor

    • hackthebox
    • easy
    • linux
    • needrestart
    • xslt
    • path-traversal
    • perl
    • python
    • T1053
    • T1053.002
    • T1059
    • T1059.006
    • T1078
    • T1078.003
    • T1110
    • T1110.002
    • T1190
  • Mar 14, 2026

    Gavel

    • hackthebox
    • medium
    • linux
    • git
    • git-dumper
    • sql-injection
    • prepared-statements
    • pdo
    • php
    • T1059
    • T1068
    • T1078
    • T1078.003
    • T1213
  • Feb 28, 2026

    Guardian

    • hackthebox
    • hard
    • linux
    • xss
    • csrf
    • local-file-read
    • idor
    • php-wrapper
    • php-filter
    • shared-library
    • python
    • xlsx
    • libreoffice
    • phpspreadsheet
    • CVE-2025-22131
    • T1059
    • T1059.006
    • T1078
    • T1078.003
    • T1110
    • T1110.002
    • T1129
    • T1190
    • T1203
    • T1552
    • T1552.001
    • T1552.008
  • Feb 21, 2026

    Giveback

    • hackthebox
    • linux
    • medium
    • kubernetes
    • runc
    • php
    • wordpress
    • CVE-2024-4577
    • CVE-2024-5932
    • T1068
    • T1078
    • T1078.003
    • T1190
    • T1528
    • T1611
  • Feb 07, 2026

    Signed

    • hackthebox
    • medium
    • windows
    • assume-breach
    • mssql
    • openrowset
    • ntlmrelayx
    • coerce
    • token
    • silver-ticket
    • rpcss
    • T1078
    • T1078.002
    • T1078.003
    • T1040
    • T1053
    • T1053.004
    • T1187
    • T1110
    • T1110.002
    • T1134
    • T1134.001
    • T1134.002
    • T1558
    • T1558.002
  • Jan 24, 2026

    Imagery

    • hackthebox
    • medium
    • linux
    • xss
    • local-file-read
    • path-traversal
    • aes
    • command-injection
    • cron
    • T1053
    • T1053.002
    • T1078
    • T1078.002
    • T1110
    • T1110.002
    • T1190

Created with ❤️ and Quartz

  • Mastodon
  • Bluesky
  • GitHub