HackTheBox & TryHackMe writeups: recon, exploitatie en privilege escalation. https://cyberstefan.nl/ 2026-06-02T00:00:00Z CyberStefanhttps://cyberstefan.nl https://cyberstefan.nl/writeup/monitorsfour/ 2026-06-02T00:00:00Z

HackTheBox — MonitorsFour (Easy) Writeup MonitorsFour is an easy Windows machine (10.129.7.65). We leak the user database through a PHP type juggling…

https://cyberstefan.nl/writeup/eighteen/ 2026-05-19T00:00:00Z

HackTheBox — Eighteen (Easy) Eighteen is a Windows Server 2025 Domain Controller. The chain starts small: HTB creds for , an MSSQL impersonate to , a…

https://cyberstefan.nl/writeup/support/ 2026-04-30T00:00:00Z

HackTheBox — Support (Easy) Support is an AD box. The chain is long but every link is small: an anonymous SMB share, a .NET binary with a hardcoded LDAP…

https://cyberstefan.nl/writeup/busqueda/ 2026-04-04T00:00:00Z

HackTheBox — Busqueda (Easy) Recon Just 22 and 80. Port 80 redirected to , so I added that to first (forgot to, got a connection error, then remembered —…

https://cyberstefan.nl/writeup/cap/ 2026-04-04T00:00:00Z

HackTheBox — Cap (Easy) Recon FTP, SSH and a web app on 80: vsftpd 3.0.3 on 21, OpenSSH 8.2p1 on 22, and Gunicorn serving a "Security Dashboard" on 80.…

https://cyberstefan.nl/writeup/sau/ 2026-04-01T00:00:00Z

HackTheBox — Sau (Easy) Recon Started with a full port scan, like always: Three things came back: 22 (SSH), 80 as , and 55555 running a Golang HTTP…