Cybersecurity, systems and softwarehttps://chin-tech.org/https://chin-tech.org/blog/general/ippsecs-unofficial-cpts-prep_2025-07-24/https://chin-tech.org/blog/general/ippsecs-unofficial-cpts-prep_2025-07-24/Going through and summarizing my experience of the 22 boxesThu, 24 Jul 2025 00:00:00 GMThttps://chin-tech.org/blog/general/the-configuration-of-hades-dog_2025-07-08/https://chin-tech.org/blog/general/the-configuration-of-hades-dog_2025-07-08/Discussing KRB5_CONFIG and fixing a small error in nmap's NSETue, 08 Jul 2025 00:00:00 GMThttps://chin-tech.org/blog/hackthebox/airtouch_2026-01-22/https://chin-tech.org/blog/hackthebox/airtouch_2026-01-22/Wifi themed box featuring a evil-twin attackThu, 22 Jan 2026 00:00:00 GMThttps://chin-tech.org/blog/general/the-cloud-resume_2025-07-06/https://chin-tech.org/blog/general/the-cloud-resume_2025-07-06/Going through the cloud-resume challenge using AWSSun, 06 Jul 2025 00:00:00 GMThttps://chin-tech.org/blog/general/a-terraformd-homelab_2025-06-18/https://chin-tech.org/blog/general/a-terraformd-homelab_2025-06-18/Learning terraform by spinning up a locally provisioned QEMU vm network!Wed, 18 Jun 2025 00:00:00 GMThttps://chin-tech.org/blog/hackthebox/fluffy_2025-07-20/https://chin-tech.org/blog/hackthebox/fluffy_2025-07-20/Easy Box featuring Active-Directory certificate services that ensures you have your tools updated!Sun, 20 Jul 2025 00:00:00 GMThttps://chin-tech.org/blog/general/adding-ai-furangel_2025-04-26/https://chin-tech.org/blog/general/adding-ai-furangel_2025-04-26/Adding AI to assist as a fallback for parsing formatted invoicesSat, 26 Apr 2025 00:00:00 GMThttps://chin-tech.org/blog/general/talos-and-kubernetes-homelab_2026-01-16/https://chin-tech.org/blog/general/talos-and-kubernetes-homelab_2026-01-16/Discussing the setup of a k8s labSat, 17 Jan 2026 00:00:00 GMThttps://chin-tech.org/blog/hackthebox/browsed_2026-01-15/https://chin-tech.org/blog/hackthebox/browsed_2026-01-15/Medium box featuring abuse of non-sandboxed browser abusing SSRF and pycache abuseThu, 15 Jan 2026 00:00:00 GMThttps://chin-tech.org/blog/hackthebox/planning_2025-05-17/https://chin-tech.org/blog/hackthebox/planning_2025-05-17/Easy box showcasing a grafana CVE and the dangers of reused secrets in environment variables and root-level crontab access.Sat, 17 May 2025 00:00:00 GMThttps://chin-tech.org/blog/hackthebox/underpass_2025-04-24/https://chin-tech.org/blog/hackthebox/underpass_2025-04-24/Easy box that reminds us that UDP is important to check and covers FreeRADIUS and Mosh for privilege escalationThu, 24 Apr 2025 00:00:00 GMThttps://chin-tech.org/blog/hackthebox/voleur_2025-07-12/https://chin-tech.org/blog/hackthebox/voleur_2025-07-12/Medium box that is one of my favorites showcasing a very obvious pathway for privilege escalation but having to use a variety of techniques to get there.Sat, 12 Jul 2025 00:00:00 GMThttps://chin-tech.org/blog/hackthebox/whiterabbit_2025-09-19/https://chin-tech.org/blog/hackthebox/whiterabbit_2025-09-19/Insane level box that utilizes lots of services, having to perform sql injection with HMAC signing, restic backups and a bad password generator that gives us rootFri, 19 Sep 2025 00:00:00 GMThttps://chin-tech.org/blog/hackthebox/nanocorp_2025-11-09/https://chin-tech.org/blog/hackthebox/nanocorp_2025-11-09/Hard box covering silver tickets & NTLM Relay attacksSun, 09 Nov 2025 00:00:00 GMThttps://chin-tech.org/blog/hackthebox/trick_2025-07-27/https://chin-tech.org/blog/hackthebox/trick_2025-07-27/Medium box that covers SQL injection and log poisoning as well as root-level services being abused for privilege escalationSun, 27 Jul 2025 00:00:00 GMThttps://chin-tech.org/blog/hackthebox/guardian_2025-09-03/https://chin-tech.org/blog/hackthebox/guardian_2025-09-03/Hard box featuring IDOR, CSRF and PHP Filtering to get in-memory PHP code execution and a way to maliciously load apache modules.Wed, 03 Sep 2025 00:00:00 GMThttps://chin-tech.org/blog/hackthebox/gavel_2025-12-27/https://chin-tech.org/blog/hackthebox/gavel_2025-12-27/Medium box showcasing 'impossible' sql injection and some php runkit function abuseSat, 27 Dec 2025 00:00:00 GMThttps://chin-tech.org/blog/hackthebox/certificate_2025-07-30/https://chin-tech.org/blog/hackthebox/certificate_2025-07-30/Hard box that covers a win-rar zip concatenation vulnerability as well as certificate privileges that give us systemWed, 30 Jul 2025 00:00:00 GMThttps://chin-tech.org/blog/wargames/overthewire-krypton_2026-07-22/https://chin-tech.org/blog/wargames/overthewire-krypton_2026-07-22/OverTheWire's Krypton WargameWed, 22 Jul 2026 00:00:00 GMThttps://chin-tech.org/blog/wargames/underthewire-oracle_2026-07-25/https://chin-tech.org/blog/wargames/underthewire-oracle_2026-07-25/UnderTheWire's Oracle - Powershell wargameSat, 25 Jul 2026 00:00:00 GMThttps://chin-tech.org/blog/vulnlab/data_vulnlab_2025-09-28/https://chin-tech.org/blog/vulnlab/data_vulnlab_2025-09-28/Easy linux box with LFI dumping grafana.db, password cracking, and sudo docker abuse for a host escape.Sun, 28 Sep 2025 00:00:00 GMT