https://chaelsoo.me/tags/season-10/Recent content in Season-10 on kanyo's blogHugo -- gohugo.ioen-gbSat, 07 Mar 2026 00:00:00 +0000https://chaelsoo.me/writeups/htb-cctv/Sat, 07 Mar 2026 00:00:00 +0000https://chaelsoo.me/writeups/htb-cctv/<p>CCTV is a Linux Easy box with a network flavor you don&rsquo;t see as often on Easy rated machines. The surveillance theme is consistent throughout. You&rsquo;re watching the system, and the system is watching you back. Passive analysis plays a bigger role here than brute force.</p> <h2 id="whats-inside">What&rsquo;s Inside</h2> <ul> <li>A surveillance software stack with a web interface worth poking around</li> <li>Network traffic that reveals more than the UI does</li> <li>A hidden service that only shows up once you&rsquo;re listening in the right place</li> <li>A short pivot from that service to a root shell</li> </ul> <p>HTB Season 10 is still active. Full writeup drops once this machine retires.</p>https://chaelsoo.me/writeups/htb-pirate/Sat, 28 Feb 2026 00:00:00 +0000https://chaelsoo.me/writeups/htb-pirate/<p>Pirate is a Windows Hard box and earns the rating. It&rsquo;s a multi stage Active Directory environment where no single step gets you very far on its own. The path to Domain Admin is built from several smaller wins stacked on top of each other. The kind of machine you want to take notes on.</p> <h2 id="whats-inside">What&rsquo;s Inside</h2> <ul> <li>A realistic Active Directory environment with multiple users, groups, and services in play</li> <li>Early enumeration that rewards thoroughness over speed</li> <li>At least two distinct AD misconfigurations that each open a new door</li> <li>A final escalation that ties the chain together, satisfying when it clicks</li> </ul> <p>HTB Season 10 is still active. Full writeup drops once this machine retires.</p>https://chaelsoo.me/writeups/htb-interpreter/Sat, 21 Feb 2026 00:00:00 +0000https://chaelsoo.me/writeups/htb-interpreter/<p>Interpreter is a Linux Medium that puts a healthcare integration platform in the spotlight. The domain context adds some flavor. Think HL7, FHIR adjacent tooling, the kind of software that runs hospitals and rarely sees a pentest. Getting in is one thing; what happens after is the more memorable part.</p> <h2 id="whats-inside">What&rsquo;s Inside</h2> <ul> <li>A web facing integration platform with an exploitable component</li> <li>Enough context clues in the app to understand what you&rsquo;re targeting</li> <li>A foothold that requires reading the application&rsquo;s behavior carefully</li> <li>A privilege escalation involving code execution in an unexpected context. This one sticks with you</li> </ul> <p>HTB Season 10 is still active. Full writeup drops once this machine retires.</p>https://chaelsoo.me/writeups/htb-wingdata/Sat, 14 Feb 2026 00:00:00 +0000https://chaelsoo.me/writeups/htb-wingdata/<p>WingData is a Linux Easy box that keeps things straightforward. Exposed service, weak credentials, misconfigured sudo. It&rsquo;s the kind of machine that teaches good enumeration habits more than anything else.</p> <h2 id="whats-inside">What&rsquo;s Inside</h2> <ul> <li>An FTP service running a version worth looking up</li> <li>Credentials that need a bit of offline work to crack</li> <li>A foothold that requires patience more than cleverness</li> <li>A sudo misconfiguration that closes things out quickly once you&rsquo;re in</li> </ul> <p>HTB Season 10 is still active. Full writeup drops once this machine retires.</p>https://chaelsoo.me/writeups/htb-pterodactyl/Sat, 07 Feb 2026 00:00:00 +0000https://chaelsoo.me/writeups/htb-pterodactyl/<p>Pterodactyl is a Linux Medium that puts a popular open source game server panel front and center. If you&rsquo;ve ever set up a Minecraft or game hosting environment, the interface will feel familiar, which makes spotting what&rsquo;s wrong with it a bit more satisfying.</p> <h2 id="whats-inside">What&rsquo;s Inside</h2> <ul> <li>A known vulnerability in a widely deployed panel. Enumeration pays off here</li> <li>Database access as a stepping stone, not the final goal</li> <li>Credential reuse across services (classic, but it works)</li> <li>A privilege escalation that builds naturally on what you already have</li> </ul> <p>HTB Season 10 is still active. Full writeup drops once this machine retires.</p>https://chaelsoo.me/writeups/htb-facts/Sat, 31 Jan 2026 00:00:00 +0000https://chaelsoo.me/writeups/htb-facts/<p>Facts is a Linux Easy box with a clean, grounded feel. The kind of machine where the attack surface is right in front of you if you bother to look carefully at the web app.</p> <h2 id="whats-inside">What&rsquo;s Inside</h2> <ul> <li>A content management system doing more than it should be</li> <li>Some cloud storage integration that leaks more than intended</li> <li>Credentials hiding in places people forget to clean up</li> <li>A privilege escalation that&rsquo;s more creative than your typical SUID hunt</li> </ul> <p>HTB Season 10 is still active. Full writeup drops once this machine retires.</p>