[htb] · m0nk3ygod

▌ RED TEAM // BLOG

m0nk3ygod Labs

QUICK REF

ACTIVITY · 69 POSTS

● LIVE

2.4 GHz

▶ OPERATOR FILE

UTC --:--:--

KST --:--:--

SESSION 00:00:00

POSTS 52

LAST 2026-09-28

OPERATOR m0nk3ygod

LOC BUSAN, KR

● ONLINE

▌ CHANNEL FILTER

ALL · 69 ▲ HTB · 52 ▲ BHPT · 4 ▲ OS · 0 ▲ PWNABLE · 0 ▲ 1-DAY · 0 ◆ CONCEPT · 12 ◆ TOOLS · 1

▌ ~/lab/intercepts/htb/ total 55

⌕

drwxr-xr-x retire/ 13 posts → drwxr-xr-x active/ 14 posts → drwxr-xr-x starting_point/ 25 posts →

DATECATTITLESTATUS

26.09.28 [HTB] NEW

≫ [MEDIUM_Windows] Administrator

AD ACL 권한 오용(force password change)과 Targeted Kerberoasting을 통해 Ethan 계정을 획득, DCSync로 Administrator NTLM 해시를 덤프한 뒤 Pass-the-Hash로 Privileged Escalation

CLEAR 26.09.18 [HTB] NEW

≫ [EASY_Linux] Nexus

Gitea 커밋 이력에서 하드코딩된 자력증명 탈취 및 Krayin CRM 접근. CVE-2026-38526 취약점을 활용한 Krayin CRM RCE로 foothold를 획득한 뒤, Gitea template sync의 Directory Traversal을 통해 비밀번호 Privilege Escalation

CLEAR 26.09.05 [HTB] NEW

≫ [HARD_Linux] Nimbus

▒▓ REDACTED · SIG 1c35·acb6·7a3e ▓▒

LOCKED 26.09.01 [HTB] NEW

≫ [MEDIUM_Linux] Tenet

PHP Deserialization RCE와 SSH Key Race Condition을 이용한 Linux Privilege Escalation

CLEAR 26.08.17 [HTB] NEW

≫ [HARD_Windows] Pirate

▒▓ REDACTED · SIG 4123·0db6·a188 ▓▒

LOCKED 26.08.12 [HTB] NEW

≫ [EASY_Windows] Blue

CVE-2017-0144 취약점을 EternalBlue로 Exploit하여 침투 및 권한 상승

CLEAR 26.08.09 [HTB] NEW

≫ [MEDIUM_Linux] DevHub

▒▓ REDACTED · SIG 47ad·82d3·1ebe ▓▒

LOCKED 26.08.03 [HTB] NEW

≫ [MEDIUM_Windows] Checkpoint

▒▓ REDACTED · SIG 5ea0·9039·3876 ▓▒

LOCKED 26.07.26 [HTB] NEW

≫ [MEDIUM_Linux] Bedside write-up

▒▓ REDACTED · SIG d16a·7503·2736 ▓▒

LOCKED 26.07.18 [HTB] NEW

≫ [MEDIUM_Linux] Helix write-up

▒▓ REDACTED · SIG 6bc5·8e11·5f0b ▓▒

LOCKED 26.07.17 [HTB] NEW

≫ [EASY_Linux] Paperwork write-up

▒▓ REDACTED · SIG 2847·6d95·194d ▓▒

LOCKED 26.07.15 [HTB] NEW

≫ [MEDIUM_Linux] Seal write-up

GitBucket 커밋 이력에서 Tomcat 자격 증명을 획득. Nginx와 Tomcat의 경로 해석 차이를 이용한 접근 제어를 우회 및 WAR 파일을 배포하여 shell 획득. 이후 Ansible 백업의 copy_links 설정을 악용한 luis의 SSH 개인키를 탈취 및 sudo -l로 실행 가능한 ansible-playbook을 이용한 root 권한 획득

CLEAR 26.07.13 [HTB] NEW

≫ [Medium_Windows] Logging write-up

▒▓ REDACTED · SIG 8b1f·10ba·3f87 ▓▒

LOCKED 26.07.08 [HTB] NEW

≫ [EASY_Linux] orion write-up

Craft CMS CVE-2025-32432 RCE 초기 침투 후 DB 정보 수집, hach crack 후 lateral movement, Telnet 취약점을 이용한 권한 상승

CLEAR 26.07.04 [HTB] NEW

≫ [EASY_Linux] Reator write-up

▒▓ REDACTED · SIG 4ef0·4e41·e2c1 ▓▒

LOCKED 26.07.01 [HTB] NEW

≫ [EASY_Linux] Silentium write-up

▒▓ REDACTED · SIG 2870·6368·e9a9 ▓▒

LOCKED 26.06.21 [HTB] NEW

≫ [EASY_LINUX] Kobold write-up

▒▓ REDACTED · SIG e3e1·df6a·480c ▓▒

LOCKED 26.06.21 [HTB] NEW

≫ [EASY_WINDOWS] Support write-up

AD 입문 머신 4

CLEAR 26.06.08 [HTB] NEW

≫ [EASY_WINDOWS] Forest write-up

AD 입문 머신 2

CLEAR 26.06.01 [HTB] NEW

≫ [EASY_WINDOWS] Fluffy write-up

AD 입문 머신 3

CLEAR 26.05.25 [HTB] NEW

≫ [MEDIUM_WINDOWS] Voleur write-up

AD 입문 머신 1

CLEAR 26.05.24 [HTB] NEW

≫ [EASY_LINUX] CCTV write-up

▒▓ REDACTED · SIG cf92·c5f5·b91e ▓▒

LOCKED 26.05.23 [HTB] NEW

≫ [STARTING_POINT] Tier1 Appointment

hackthebox tier1 appointment