http://shellthisbox.io/Recent content on >_ shell this boxHugoen-usTue, 31 Mar 2026 12:01:35 +0300http://shellthisbox.io/posts/htb-machine-lame/Tue, 31 Mar 2026 12:01:35 +0300http://shellthisbox.io/posts/htb-machine-lame/<h2 id="introduction">Introduction:</h2> <p>Lame is the oldest retired Linux machine on the Hack The Box platform. It is rated easy and was originally released on March 14, 2017. In this walkthrough, I’ll use HTB’s Guided Mode to better understand the exploitation process step by step.</p> <h2 id="attack-path-summary">Attack Path Summary</h2> <ul> <li>Enumeration → Nmap reveals Samba 3.0.20</li> <li>Initial attempt → VSFTPD exploit (failed)</li> <li>Foothold → CVE-2007-2447 (Samba RCE)</li> <li>Privilege level → root access via exploit</li> </ul> <hr> <p><code>Target_IP</code>: 10.129.12.112</p>http://shellthisbox.io/posts/htb-machine-editor/Thu, 26 Mar 2026 12:01:35 +0300http://shellthisbox.io/posts/htb-machine-editor/<h2 id="introduction">Introduction:</h2> <p>This is my first write-up on this blog—and actually my first write-up ever. Hope you enjoy it.</p> <p><code>Target_IP</code>: 10.129.8.250</p> <p>The first step is to verify that the target host is reachable:</p> <h2 id="enumeration">Enumeration:</h2> <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-css" data-lang="css"><span class="line"><span class="cl"><span class="nt">ping</span> <span class="nt">Target_IP</span> </span></span></code></pre></div><div class="highlight"><pre tabindex="0" class="chroma"><code class="language-shell" data-lang="shell"><span class="line"><span class="cl">ping 10.129.8.250 </span></span><span class="line"><span class="cl">PING 10.129.8.250 <span class="o">(</span>10.129.8.250<span class="o">)</span> 56<span class="o">(</span>84<span class="o">)</span> bytes of data. </span></span><span class="line"><span class="cl"><span class="m">64</span> bytes from 10.129.8.250: <span class="nv">icmp_seq</span><span class="o">=</span><span class="m">1</span> <span class="nv">ttl</span><span class="o">=</span><span class="m">63</span> <span class="nv">time</span><span class="o">=</span>7.80 ms </span></span><span class="line"><span class="cl"><span class="m">64</span> bytes from 10.129.8.250: <span class="nv">icmp_seq</span><span class="o">=</span><span class="m">2</span> <span class="nv">ttl</span><span class="o">=</span><span class="m">63</span> <span class="nv">time</span><span class="o">=</span>7.96 ms </span></span><span class="line"><span class="cl"><span class="m">64</span> bytes from 10.129.8.250: <span class="nv">icmp_seq</span><span class="o">=</span><span class="m">3</span> <span class="nv">ttl</span><span class="o">=</span><span class="m">63</span> <span class="nv">time</span><span class="o">=</span>7.90 ms </span></span><span class="line"><span class="cl"><span class="m">64</span> bytes from 10.129.8.250: <span class="nv">icmp_seq</span><span class="o">=</span><span class="m">4</span> <span class="nv">ttl</span><span class="o">=</span><span class="m">63</span> <span class="nv">time</span><span class="o">=</span>8.00 ms </span></span><span class="line"><span class="cl">^C </span></span><span class="line"><span class="cl">--- 10.129.8.250 ping statistics --- </span></span><span class="line"><span class="cl"><span class="m">4</span> packets transmitted, <span class="m">4</span> received, 0% packet loss, <span class="nb">time</span> 3004ms </span></span><span class="line"><span class="cl">rtt min/avg/max/mdev <span class="o">=</span> 7.800/7.915/7.995/0.074 ms </span></span></code></pre></div><p>A successful response confirms that the host is alive and accessible on the network.</p>http://shellthisbox.io/posts/starting-my-cybersecurity-journey/Sun, 22 Mar 2026 15:01:35 +0300http://shellthisbox.io/posts/starting-my-cybersecurity-journey/<h2 id="hi-im-marcin-">Hi, I&rsquo;m Marcin 👋</h2> <p>Welcome to my blog.</p> <p>This space is where I document my journey into cybersecurity — from the basics to more advanced topics over time. I&rsquo;m not an expert (yet), but I strongly believe that sharing the process is just as valuable as sharing the results.</p> <hr> <h2 id="why-this-blog">Why this blog?</h2> <p>I created this blog mainly for two reasons:</p> <ul> <li>To <strong>track my own progress</strong></li> <li>To <strong>build a personal knowledge base</strong></li> </ul> <p>Instead of scattered notes, I want everything in one place — structured, searchable, and useful both for me and anyone who might be on a similar path.</p>http://shellthisbox.io/about/Mon, 01 Jan 0001 00:00:00 +0000http://shellthisbox.io/about/<p>Hi, I’m Marcin.</p> <p>I’m currently on a journey into cybersecurity, focused on building real, practical skills through hands-on experience. Most of my learning comes from platforms like Hack The Box, where I work through machines, practice enumeration, and try to understand how systems actually break.</p> <hr> <h2 id="why-this-blog">Why this blog?</h2> <p>I created this blog as my personal knowledge base.</p> <p>Instead of keeping scattered notes, I document everything here:</p> <ul> <li>techniques I learn</li> <li>tools I use</li> <li>mistakes I make</li> <li>and lessons that actually stick</li> </ul> <p>This helps me stay consistent and track my progress over time.</p>http://shellthisbox.io/archive/Mon, 01 Jan 0001 00:00:00 +0000http://shellthisbox.io/archive/http://shellthisbox.io/elements/Mon, 01 Jan 0001 00:00:00 +0000http://shellthisbox.io/elements/<p>A paragraph looks like this — Globally incubate standards compliant channels before scalable benefits. Quickly disseminate superior deliverables whereas web-enabled applications. Quickly drive clicks-and-mortar catalysts for change before vertical architectures. Credibly reintermediate backend ideas for cross-platform models. Continually reintermediate integrated processes through technically sound intellectual capital. Holistically foster superior methodologies.</p> <hr> <h2 id="headings-by-default">Headings by default:</h2> <h1 id="h1-default-styles-for-headings">H1 Default styles for headings</h1> <h2 id="h2-default-styles-for-headings">H2 Default styles for headings</h2> <h3 id="h3-default-styles-for-headings">H3 Default styles for headings</h3> <h4 id="h4-default-styles-for-headings">H4 Default styles for headings</h4> <h5 id="h5-default-styles-for-headings">H5 Default styles for headings</h5> <h6 id="h6-default-styles-for-headings">H6 Default styles for headings</h6> <hr> <h2 id="lists">Lists</h2> <h3 id="ordered-list-example">Ordered list example:</h3> <ol> <li>Poutine drinking vinegar bitters.</li> <li>Coloring book distillery fanny pack.</li> <li>Venmo biodiesel gentrify enamel pin meditation.</li> <li>Jean shorts shaman listicle pickled portland.</li> <li>Salvia mumblecore brunch iPhone migas.</li> </ol> <hr> <h3 id="unordered-list-example">Unordered list example:</h3> <ul> <li>Bitters semiotics vice thundercats synth.</li> <li>Literally cred narwhal bitters wayfarers.</li> <li>Kale chips chartreuse paleo tbh street art marfa.</li> <li>Mlkshk polaroid sriracha brooklyn.</li> <li>Pug you probably haven&rsquo;t heard of them air plant man bun.</li> </ul> <hr> <h2 id="table">Table</h2> <div class="table-container"> <table> <tr><th>Header 1</th><th>Header 2</th><th>Header 3</th><th>Header 4</th><th>Header 5</th></tr> <tr><td>Row:1 Cell:1</td><td>Row:1 Cell:2</td><td>Row:1 Cell:3</td><td>Row:1 Cell:4</td><td>Row:1 Cell:5</td></tr> <tr><td>Row:2 Cell:1</td><td>Row:2 Cell:2</td><td>Row:2 Cell:3</td><td>Row:2 Cell:4</td><td>Row:2 Cell:5</td></tr> <tr><td>Row:3 Cell:1</td><td>Row:3 Cell:2</td><td>Row:3 Cell:3</td><td>Row:3 Cell:4</td><td>Row:3 Cell:5</td></tr> <tr><td>Row:4 Cell:1</td><td>Row:4 Cell:2</td><td>Row:4 Cell:3</td><td>Row:4 Cell:4</td><td>Row:4 Cell:5</td></tr> <tr><td>Row:5 Cell:1</td><td>Row:5 Cell:2</td><td>Row:5 Cell:3</td><td>Row:5 Cell:4</td><td>Row:5 Cell:5</td></tr> <tr><td>Row:6 Cell:1</td><td>Row:6 Cell:2</td><td>Row:6 Cell:3</td><td>Row:6 Cell:4</td><td>Row:6 Cell:5</td></tr> </table> </div> <hr> <h2 id="quotes">Quotes</h2> <h4 id="a-quote-looks-like-this">A quote looks like this:</h4> <blockquote> <p>Design is not just what it looks like and feels like. Design is how it works.</p>http://shellthisbox.io/contact/Mon, 01 Jan 0001 00:00:00 +0000http://shellthisbox.io/contact/