Oscp-Prep

Monitorsfour — Medium Windows machine walkthrough cover

Monitorsfour — HackTheBox Walkthrough

MonitorsFour chains a fresh Cacti RCE vulnerability with an exposed Docker API to go from web login to full Windows host compromise — a great lesson in container escape methodology.

Meow — Easy Linux machine walkthrough cover

Meow — HackTheBox Starting Point Walkthrough

Meow is HTB’s gentlest introduction to penetration testing — a single open Telnet port, no password on the root account, and an immediate lesson in why legacy services are dangerous.

Overwatch — Medium Windows machine walkthrough cover

Overwatch — HackTheBox Walkthrough

Overwatch chains MSSQL linked server credential capture via DNS poisoning with a WCF service PowerShell injection to go from unauthenticated to Domain Admin on a Windows Server 2022 DC.

Browsed — Medium Linux machine walkthrough cover

Browsed — HackTheBox Walkthrough

Browsed is a devious medium Linux box where you weaponize a Chrome extension upload feature to chain browser automation, bash arithmetic injection, and Python bytecode poisoning into a full root compromise.

Conversor — Easy Linux machine walkthrough cover

Conversor — HackTheBox Walkthrough

A Flask-based XML/XSLT converter with exposed source code, an unsanitized file upload, and a cron-powered RCE — topped off with a fresh needrestart CVE for root.