The Archive

A Linux machine focused on web exploitation: SQL injection in a vaccine management portal leads to code execution, followed by privilege escalation through misconfigured sudo rights. A great box for learning web-to-system pivoting methodology.

A Windows machine exploiting LLMNR/NBT-NS poisoning to capture NetNTLMv2 hashes, crack them offline, and leverage responder analysis for lateral movement to system access.