https://mrbeetrootpwn.com/write-ups/vulnlab/Recent content in VulnLab on CyberSec WriteupsHugoen-usMon, 23 Mar 2026 00:00:00 +0000https://mrbeetrootpwn.com/write-ups/vulnlab/vuln-breach/Mon, 23 Mar 2026 00:00:00 +0000https://mrbeetrootpwn.com/write-ups/vulnlab/vuln-breach/Active Directory machine capturing NTLM hashes from a writable SMB share, Kerberoasting a service account, forging an MSSQL Silver Ticket, and escalating via SeImpersonatePrivilege.https://mrbeetrootpwn.com/write-ups/vulnlab/vuln-baby2/Sun, 22 Mar 2026 00:00:00 +0000https://mrbeetrootpwn.com/write-ups/vulnlab/vuln-baby2/Active Directory box enumerating users over SMB, reusing a weak password, abusing a writable logon script, and escalating through GPO.https://mrbeetrootpwn.com/write-ups/vulnlab/vuln-baby/Sat, 21 Mar 2026 00:00:00 +0000https://mrbeetrootpwn.com/write-ups/vulnlab/vuln-baby/Active Directory machine combining anonymous LDAP enumeration, password reset abuse, SeRestorePrivilege execution, and a manual NTDS extraction.https://mrbeetrootpwn.com/write-ups/vulnlab/vuln-lock/Thu, 16 Oct 2025 00:00:00 +0000https://mrbeetrootpwn.com/write-ups/vulnlab/vuln-lock/Windows machine exploiting an exposed Gitea access token, abusing repository-backed web deployment, recovering mRemoteNG credentials, and escalating through PDF24.https://mrbeetrootpwn.com/write-ups/vulnlab/vuln-job2/Wed, 15 Oct 2025 00:00:00 +0000https://mrbeetrootpwn.com/write-ups/vulnlab/vuln-job2/Windows box driven by macro-based phishing, hMailServer database credential recovery, lateral movement over RDP, and Veeam Backup exploitation.https://mrbeetrootpwn.com/write-ups/vulnlab/vuln-job/Mon, 13 Oct 2025 00:00:00 +0000https://mrbeetrootpwn.com/write-ups/vulnlab/vuln-job/Windows machine starting from a phishing LibreOffice document, abusing IIS web root access, and escalating with SeImpersonatePrivilege via GodPotato and RunasCs.https://mrbeetrootpwn.com/write-ups/vulnlab/vuln-escape/Sun, 12 Oct 2025 00:00:00 +0000https://mrbeetrootpwn.com/write-ups/vulnlab/vuln-escape/Windows kiosk-style box breaking out through RDP and Edge file-system browsing, bypassing binary restrictions by renaming executables, recovering a password from Remote Desktop Plus, and elevating UAC through the GUI.https://mrbeetrootpwn.com/write-ups/vulnlab/vuln-data/Tue, 20 May 2025 00:00:00 +0000https://mrbeetrootpwn.com/write-ups/vulnlab/vuln-data/Linux machine exploiting a Grafana arbitrary file read, cracking the recovered credentials, and escaping a privileged Docker container after SSH access.https://mrbeetrootpwn.com/write-ups/vulnlab/vuln-sync/Tue, 13 May 2025 00:00:00 +0000https://mrbeetrootpwn.com/write-ups/vulnlab/vuln-sync/Linux machine reached through anonymous rsync access, cracking a salted MD5 hash, planting an SSH key via FTP, reusing a password, and abusing a cronjob for root.