Offensive security,
written down.

I’m Agus Prasetyo (404Gh0st), a penetration tester and CTF player from Indonesia. This site records the useful parts of each box and challenge: paths, mistakes, tools, and fixes.

Read the writeups About me

Latest writeups

The newest post, plus the three before it.

All writeups

February 22, 202624 min read#Pwn#Kernel#Stack

BITSCTF 2026

Writeup for BITSCTF 2026

HTB: FluffyFluffy is an easy Windows machine that demonstrates CVE-2025-24071, Shadow Credentials technique, and ESC16 vulnerability on ADCS.May 31, 2025#Windows
HTB: NocturnalNocturnal is an easy Linux machine that demonstrates command injection bypass and privilege escalation using CVE-2023-46818.May 31, 2025#Linux
HTB: PlanningPlanning is an easy Linux machine that demonstrates CVE-2024-9264 to get initial access and using crontab-ui to escalate privilege.May 31, 2025#Linux

From the archive

Older machines and challenges, newest first.

404Gh0stMay 30, 2025#Windows

HTB: Puppy

Puppy is a medium Windows machine. This is a grey box machine with a supplied credential. With the credential, we can take advantage of GenericWrite to get access to specific shares. Then, we found a KeePass database file that contains a valid credential for another user account. This user account has GenericAll to another user account that belongs to the Remote Management Users group. There will be a backup file that contains another credential inside the machine. Using the credential, we found a saved credential in the DPAPI that contains a credential for administrative user account.

8 min read · Medium

404Gh0stMay 4, 2025#Linux

HTB: Environment

Environment is a Linux machine. The box involves exploiting a Laravel web application vulnerability (CVE-2024-52301) to bypass authentication and upload a shell. It involves finding and decrypting a GPG backup file to obtain credentials, and finally escalating privileges to root by abusing sudo permissions and the BASH_ENV variable.

5 min read · Medium

404Gh0stMarch 31, 2025#Windows

HTB: Haze

Haze is a challenging Active Directory machine characterized by a vulnerable Splunk installation and security configurations. The machine involves CVE-2024-36991, decrypting the Splunk secret, exploiting multiple ACL/ACE vulnerabilities, and abusing SeImpersonatePrivilege.

13 min read · Hard

404Gh0stMarch 23, 2025#Linux

HTB: Code

Code is an easy Linux machine that demonstrates a Python Jail / Sandbox escape and privilege escalation from backy program.

4 min read · Easy

The record so far

Counted from what is on this site, not claimed.

Full record

15Hack The Box certificates: Including CPTS and the Dante, Zephyr, and Offshore Pro Labs. Each one links to its PDF.
15Writeups published: Hack The Box machines and CTF challenges, with the commands that worked and the ones that did not.
8CTF podium finishes: Most recent: 1st Place at KMIPN 2026.

Verified on Hack The Box

Every record opens the original certificate PDF.

HTB profile

Offensive security,written down.