HTB: Investigation

Investigation starts with a website that accepts user uploaded images and runs Exiftool on them. This version has a command injection. I’ll dig into that vulnerability, and then exploit it to get a foothold. Then I find a set of Windows event logs, and analyze them to extract a password. Finally, I find a piece of malware that runs as root and understand it to get execution.

Active Writeup w/o Metasploit - Hack The Box OSCP Preparation

HTB: Investigation

HTB — Investigation. A detailed walkthrough for solving…, by Niraj Kharel

HackTheBox Bolt walkthrough

How to buy police evidence management products (eBook)

Hack the Box (HTB) – Soccer – Lisandre

Walk-through of Union from HackTheBox

HTB Cyber Apocalypse 2023: Forensics - forensicskween

Approach for investigating the photobinding of HTB to HSA.