0xdf @0xdf_

Training Architect @ HackTheBox "Potentially a legit security researcher" he/him https://t.co/GCcLVlmdQK https://t.co/uQWVpw4nft 0xdf on discord 0xdf.gitlab.io Joined January 2015

Tweets

3K
Followers

25K
Following

468
Likes

4K

0xdf @0xdf_

16 hours ago

The second @vulnlab release on @hackthebox_eu this week is Media. There's an interesting NTLM capture, followed by a pivot back to the local service account to get SeImpersonate. 0xdf.gitlab.io/2025/09/04/htb…

0 6 55 3K 17

0xdf @0xdf_

3 days ago

Race is a neat @vulnlab_eu box now on @hackthebox_eu involving Grav CMS, phpSysInfo, and a very fun time of check / time of use vulnerability. 0xdf.gitlab.io/2025/09/02/htb…

0 7 48 2K 9

0xdf @0xdf_

6 days ago

Eureka from @hackthebox_eu showcases exploiting Spring Boot and the heapdump endpoint, Spring Cloud Gateway, and some Bash arithmetic operations. 0xdf.gitlab.io/2025/08/30/htb…

0 13 73 4K 18

0xdf @0xdf_

a week ago

We're going live on this week's Cube Talk from @hackthebox_eu in 2.5 hours. Come join us on the Discord: discord.gg/senmmDM

0 1 18 2K 2

0xdf @0xdf_

a week ago

Sendai from @vulnlab_eu now on @hackthebox_eu has some windows AD, and two paths to root, via ADCS and SeImpersonate. 0xdf.gitlab.io/2025/08/28/htb…

1 19 87 5K 29

0xdf @0xdf_

a week ago

Reaper from @vulnlab now on @hackthebox_eu is straight up Windows pwn. The foothold is a BOF, whereas to get SYSTEM I'll abuse a custom driver. 0xdf.gitlab.io/2025/08/26/htb…

2 20 99 6K 37

0xdf @0xdf_

2 weeks ago

TheFrizz from @hackthebox_eu has Gibbons LMS, arb file write, salted hash cracking, SSH over Kerberos, Recyclebin recovery, and Group Policy abuse. 0xdf.gitlab.io/2025/08/23/htb…

1 8 68 4K 21

0xdf @0xdf_

2 weeks ago

Lock is the second @vulnlab_eu box to release on @hackthebox_eu (yesterday). Gitea API, RDP, mRemoteNG, and a fun interactive privesc of the kind not typically seen on HTB. 0xdf.gitlab.io/2025/08/21/htb…

1 11 72 5K 18

0xdf @0xdf_

2 weeks ago

Some really nice research here from CyberJunkie: hackthebox.com/blog/windows-s…

0 3 16 2K 11

0xdf @0xdf_

2 weeks ago

The Phantom box from @vulnlab_eu released on @hackthebox_eu today. I'll showcase with password tricks, Veracrypt, and AllowedToAct / RBCD without an SPN. 0xdf.gitlab.io/2025/08/19/htb…

1 21 109 5K 27

0xdf @0xdf_

3 weeks ago

Nocturnal from @hackthebox_eu showcases injection vulnerabilities. I'll abuse an IDOR to get access to the admin panel, and then command injection to get a foothold. For root I'll exploit a PHP code injection vulnerability in ISPConfig. 0xdf.gitlab.io/2025/08/16/htb…

1 15 78 5K 24

Jonathan Bar Or (JBO) 🇮🇱🇺🇸🇺🇦🎗️ @yo_yo_yo_jbo

3 weeks ago

New blogpost, this time about different ways to dump lsass. While not novel, I explain all techniques and uploaded a full implementation of different ways of dumping lsass: github.com/yo-yo-yo-jbo/d… As a reminder, all my content is available at jonathanbaror.com

2 108 434 26K 318

Download Image

0xdf @0xdf_

3 weeks ago

This week's second @vulnlab release on @hackthebox_eu, Sweep, is all about a lansweeper instance. I'll keep getting better and better creds from the applicaiton. 0xdf.gitlab.io/2025/08/14/htb…

0 9 42 2K 3

0xdf @0xdf_

3 weeks ago

Zero from @hackthebox_eu via @vulnlab_eu releases this week. It's all about exploiting Apache. I'll abuse .htaccess files to get a foothold. Then I'll fake process names in the process list and overload a parameter to get a rogue Apache process running. 0xdf.gitlab.io/2025/08/12/htb…