Season 11

HTB: TrustFall

TrustFall is an Insane-rated hybrid machine featuring a complex, multi-stage kill chain that bridges external web exploitation with deep Active Directory and …

September 12, 2026 · 22337 words · 105 min

Insane Windows Season 11 Season of the Punk CVE-2026-22200 CVE-2026-24061 ADCS ESC17 WinRM RDP DACL VBScript PRNG WSUS ESC7

HTB: DanglingTree

DanglingTree is a Medium-difficulty Windows machine focusing on Windows Admin Center (WAC) exploitation and cryptographic analysis. The foothold involves …

August 9, 2026 · 10798 words · 51 min

Medium Windows Season 11 Season of the Punk CVE-2026-26119 CVE-2026-23760 CVE-2026-24423 DLL Decompilation DPAPI ESC4 ESC1 PKINIT

HTB: DarkZeroReturns

Heron is an advanced Active Directory scenario featuring complex multi-step exploitation chains including web entry points (like SSTI leading to RCE), …

July 28, 2026 · 8664 words · 41 min

Hard Windows Season 11 Season of the Punk CVE-2026-33937 CVE-2026-22555 Cross-forest Golden ticket SeBackupPrivilege

HTB: Reactor

Reactor is an Easy-rated Linux machine where initial access is gained by exploiting CVE-2025-55182 (React2Shell), a pre-auth RCE in React Server Components …

May 24, 2026 · 4232 words · 20 min

Easy Linux Season 11 Season of the Punk CVE-2025-55182 React2Shell SQLite Credential Harvesting NodeJS Debug Port Hijack

HTB: SmartHire

SmartHire is a Medium-rated Linux machine that chains MLflow unsafe deserialization (CVE-2024-37054) to pivot from an unauthenticated web portal into a foothold …

May 17, 2026 · 2117 words · 10 min

Medium Linux Season 11 Season of the Punk MLflow CVE-2024-37054 RCE SUDO SUID

No posts match this tag.