A walkthrough of the most useful .vimrc settings, from number and cursorline to tab width and indentation.

How Vim text objects let you act on a word, sentence, paragraph, block, tag or quoted string in one keystroke.

A beginner's tour of Vim: installing it, then moving by characters, words, lines, matching brackets and counts.

HackTheBox Ambassador: Grafana path traversal CVE-2021-43798 for database credentials, then root through the Consul API.

HackTheBox Support: reversing UserInfo.exe with dnSpy for LDAP credentials, then resource-based constrained delegation.

HackTheBox Outdated: a Follina payload mailed to IT support, then shadow credentials and WSUS abuse for domain admin.

HackTheBox RedPanda: Java template injection for a shell, then an XXE in a root-run log parser to steal the SSH key.

HackTheBox Shared: UNION SQL injection in a shop cookie, an iPython CVE for lateral movement, then a root-owned Redis.

HackTheBox Faculty: SQL injection for a foothold, sudo meta-git for lateral movement, then gdb capabilities for root.

HackTheBox Scrambled: a domain with NTLM disabled, kerberoasting into MSSQL, then a .NET deserialization attack.

HackTheBox StreamIO: sqlmap on the login page and an LFI turned RCE, then granting ourselves ReadLAPSPassword.

HackTheBox Noter: forging a Flask session cookie, pivoting through FTP, then root with a MySQL UDF exploit.

HackTheBox Timelapse: a password-protected PFX from an open SMB share into WinRM, then LAPS reader rights for Administrator.

Solving a RingZer0 speed-math challenge with a Tampermonkey userscript instead of Python.

Automating a RingZer0 SSH challenge with a Python pty: parse the board, solve the Sudoku and reply in under ten seconds.

HackTheBox RouterSpace: proxying an Android app through Burp to reach command injection, then a public exploit for root.

HackTheBox Late: server-side template injection through a Flask OCR upload, then root via a script running as root.

Working through all eight levels of the RingZer0 SysAdmin Linux track over SSH, one enumeration trick at a time.

Scripting a RingZer0 challenge in Python: scrape the page, base64-decode the message and XOR it back inside the three-second limit.

Introducing my brand new Blog where I will write something interesting.