All Walkthroughs - HackPath

HackTheBox Medium

Aug 10, 2026 • 10 min read

TombWatcher - HackTheBox

A full walkthrough of TombWatcher (HTB) from a targeted Kerberoast all the way to Domain Admin via a chained ESC15 → ESC3 ADCS exploit, with a deleted-object restoration twist in the middle.

#ADCS #Active Directory #BloodHound #Certificate Abuse #ESC15

HackTheBox Medium

Jan 18, 2026 • 5 min read

Jeeves - HackTheBox

Medium-difficulty Windows box featuring unauthenticated Jenkins exploitation via Groovy Script Console, followed by SeImpersonatePrivilege abuse with JuicyPotato for privilege escalation. Root flag hidden in NTFS Alternate Data Streams.

#Alternate Data Streams #Jenkins #Juicy-Potato #SeImpersonatePrivilege #Web

TryHackMe Medium

Jan 09, 2026 • 5 min read

Mindgames - TryHackMe

Medium-difficulty Linux box featuring RCE through Brainfuck-encoded Python execution, followed by automated enumeration and privilege escalation via CVE-2021-4034 (PwnKit).

#Brainfuck #Linux #PwnKit #Python #RCE

TryHackMe Medium

Dec 20, 2025 • 10 min read

Safezone - TryHackMe

Medium Linux CTF combining Apache log poisoning, authentication bruteforcing, command injection filter bypass, and creative sudo exploitation. Multiple privilege escalation paths from web to root.

#Command Injection #Linux #Log Poisoning #Web

HackTheBox Medium

Dec 18, 2025 • 10 min read

Imagery - HackTheBox

A medium-rated Linux machine, designed to provide hands-on experience with specific web application vulnerabilities(XSS, LFI, OS command Injection) and privilege escalation techniques.

#Linux #Web