Welcome to my blog. Why start writing blog? To be honest, I’m a very lazy person and don’t like taking notes. Even when I do, they are just scattered records without any systematic organizatio...

前言 這篇心得都是自己的想法，並沒有使用生成式 AI 進行任何修正或潤飾，有任何資訊錯誤或有問題的地方還請見諒 人權證明 ： https://academy.hackthebox.com/achievement/badge/1e7084ba-b08b-11f1-82d1-bea50ffe6cb4 首先說明一下為什麼是挑選這張作為證照噴錢之旅的第一站，說實在沒有什麼特別的原因，最主要是因為...

BadSuccessor (CVE-2025-53779) vs Basic Rubeus TGT Attack From checkpoint.htb -> deep research on dMSA privilege escalation compared with standard Kerberos TGT attacks. Part 1 — CVE-2025-5377...

Box Info about Administrator is a medium-difficulty Windows machine designed around a complete domain compromise scenario, where credentials for a low-privileged user are provided. To gain ...

Box Info About Driver is an easy Windows machine that focuses on printer exploitation. Enumeration of the machine reveals that a web server is listening on port 80, along with SMB on port 4...