Security Archives - nPm Hacks

Offsec Proving Grounds Walkthrough – Bitest

By nPm December 5, 2025Ethical Hacking, Hacking, Javascript, Linux, Networking, Node.js, Offsec, Security, Tutorial, Walkthrough

This is a walkthrough of OffSec Proving Grounds machine "Bitest". It is rated as Intermediate but it was quite difficult and I had to get creative. We start by exploiting rsync and move on to a program called Vitest. Using a very recent exploit poc (2025) we are finally able…

Offsec Proving Grounds Walkthrough – BlackGate

By nPm November 30, 2025Ethical Hacking, Hacking, Linux, Networking, Offsec, Python, Security, Tutorial, Walkthrough

This is a walkthrough of OffSec Proving Grounds machine "BlackGate". It is rated as hard but there are several ways to take advantage of this machine (likely not intended by Offsec). We start by exploiting Redis and privesc using misconfigured SUID setting BUT there are some things you will need…

Offsec Proving Grounds Walkthrough – Press

By nPm November 28, 2025Ethical Hacking, Hacking, Linux, Networking, Offsec, Python, Security, Tutorial, Walkthrough

This is a walkthrough of the OffSec machine called Press. In this video we take advantage of a Flatpress blog and then we privesc using a misconfigured SUID binary. ***SPOILER***Walkthrough of the machine called "Press" in the Offsec Proving Grounds...don't watch unless you want help getting through the machine. https://youtu.be/4iG_qOSldok

Hack the Box Walkthrough – Reset

By nPm November 21, 2025Ethical Hacking, Hacking, HTB, Linux, Networking, Python, Security, Tutorial, Walkthrough

This is a walkthrough of the Hack The Box machine called "Reset". It features the use of Burp Suite to analyze a website password reset, then deliver a payload by injecting it into the Apache2 access.log of the server, then we escalate our privileges by abusing rlogin and tmux .…

Hack the Box Walkthrough – Job

By nPm November 14, 2025Ethical Hacking, Hacking, HTB, Linux, Networking, Security, Tutorial, Walkthrough

🪄This is a walkthrough of the Hack The Box machine called "Job". It features the use of a phishing campaign utilizing malicious .odt LibreOffice files to gain initial access to the machine. We privesc by taking advantage of the impersonate privilege with printspoofer64! I learned a lot tackling this one.…

Offsec Proving Grounds Walkthrough – Codo

By nPm November 10, 2025Ethical Hacking, Hacking, Linux, Networking, Offsec, Python, Security, Tutorial, Walkthrough

This is a walkthrough of the machine called "Codo" in the OffSec Proving Grounds...don't watch unless you want help getting through the machine. This time we take advantage of CodoForum software and bad password practices! Hope this helps someone and enjoy! https://youtu.be/U7H3bMPiS-I

Hack the Box Walkthrough – Beep

By nPm November 7, 2025Ethical Hacking, Hacking, HTB, Linux, Networking, Python, Security, Tutorial, Walkthrough

This is a walkthrough of the Hack The Box machine called "Beep". It features the use of exploits to compromise Elastix/FreePBX, reverse shells, abusing binaries with the SUID set, and much more. I learned a lot tackling this one. You will need to lower your browsers TLS version to be…

Offsec Proving Grounds Walkthrough – Compromised

By nPm November 4, 2025Ethical Hacking, Hacking, Linux, Networking, Offsec, Python, Security, Tutorial, Walkthrough

Walkthrough of the machine called "Compromised" in the OffSec Proving Grounds...don't watch unless you want help getting through the machine. We take advantage of SMB, then use PowerShell to exploit this machine. ⚠️The privesc portion is very tough (at least for me it was) and I provide some breakdowns of…

Offsec Proving Grounds Walkthrough – PC

By nPm October 31, 2025Ethical Hacking, Hacking, Linux, Networking, Offsec, Python, Security, Tutorial, Walkthrough

Walkthrough of the machine called "PC" in the OffSec Proving Grounds...don't watch unless you want help getting through the machine. I had some issues with exploits working but eventually found a winner. The first one will likely work if you clean it up as will the second one if you…

Offsec Proving Grounds Walkthrough – LaVita

By nPm October 28, 2025Ethical Hacking, Hacking, Linux, Networking, Offsec, Python, Security, Tutorial, Walkthrough

⚡This is a walkthrough of OffSec Proving Grounds machine called "LaVita" In this walkthrough we exploit the Laravel PHP Framework using a python exploit, utilize pspy64 to view processes running as other users, and perform shell injection into running processes to get access to another account. Finally, we utilize GTFObins…