https://exi.lol/
Lane's Totally Awesome Writeups
A minimal, responsive and feature-rich Jekyll theme for technical writing.
2025-05-01T20:08:01-04:00
Lane
https://exi.lol/
Jekyll
© 2025 Lane
//assets/img/favicons/favicon.ico
//assets/img/favicons/favicon-96x96.png
Cat Pictures II
2024-09-19T00:00:00-04:00
2024-09-19T00:00:00-04:00
https://exi.lol/posts/CatPicturesII/
Lane
Initial Scans
Port 1337 Enum
Port 80 Enum
Port 8080 Enum
Port 3000 Enum
Initial Access
Privilege Escalation
Command List
rustscan -a 10.10.51.22 --ulimit 5000 -- -A -T4 -Pn -oN nmap.log
PDFy HTB Challenge
2024-06-03T00:00:00-04:00
2024-06-03T00:00:00-04:00
https://exi.lol/posts/PDFy/
Lane
Basic Enumeration
Upon starting the docker instance, I was given a link to the PDFy website. It appeared to be an HTML to PDF converter where you supply a webpage and it will take a snapshot of the page and convert it as a PDF and relay it back to you. I tested it by putting ‘https://google.com’ in the textbox and seeing what happened.
Looking for Exploits
To determine if an exploit is poss...
Blue THM
2024-02-28T00:00:00-05:00
2024-02-28T00:00:00-05:00
https://exi.lol/posts/Blue/
Lane
Nmap
Nmap reveals ports 139, 135, 445, 3389, as well as a few other ports that are random dynamic Windows RPC ports. The Nmap scan did reveal that the computer was running Windows 7 Pro 7601 SP1.
Recognizing that this is an obsolete version of Windows, running a quick Google search reveals that this version is vulnerable to the EternalBlue exploit.
Exploitation
Using Metasploit, I found an ...
RootMe THM
2024-02-27T00:00:00-05:00
2024-02-27T00:00:00-05:00
https://exi.lol/posts/RootMe/
Lane
Nmap
The scan reveals only ports 22 (SSH) and 80 (HTTP) and nothing else that seems like a possible attack vector.
Basic Web Enumeration
The main page doesn’t reveal much so we may have to do more manual enumeration
A quick Gobuster serarch reveals the /panel directory.
Going to the page shows a file upload screen. Trying to upload a PHP reverse shell shows a message saying that PHP isn’...
Notes
2024-02-19T00:00:00-05:00
2024-02-19T00:00:00-05:00
https://exi.lol/posts/Notes/
Lane
HackTheBox Notes
Office