1<!DOCTYPE html> 2<html lang="en"> 3<head> 4 5 <title>Hackthebox</title> 6 <meta charset="utf-8" /> 7 <meta http-equiv="X-UA-Compatible" content="IE=edge" /> 8 <meta name="HandheldFriendly" content="True" /> 9 <meta name="viewport" content="width=device-width, initial-scale=1.0" /> 10 11 <link rel="preload" as="style" href="/assets/built/screen.css?v=FnB2fxM57KctsQub" /> 12 <link rel="preload" as="script" href="/assets/built/casper.js?v=Wk5PDoc8JwHVIPbN" /> 13 14 <link rel="stylesheet" type="text/css" href="/assets/built/screen.css?v=FnB2fxM57KctsQub" /> 15 16 <meta name="description" content="I took the better part of the day, bought the VIP access on HTB and started working on all the easy machines."> 17 <link rel="canonical" href="https://www.jasonsohl.com/hackthebox/"> 18 <meta name="referrer" content="no-referrer-when-downgrade"> 19 20 <meta property="og:site_name" content="Jason Sohl"> 21 <meta property="og:type" content="article"> 22 <meta property="og:title" content="Hackthebox"> 23 <meta property="og:description" content="I took the better part of the day, bought the VIP access on HTB and started working on all the easy machines. The nice part about the VIP access now is that you can spin up any retired box on demand and work on it as you please - this is a new feature that was added and was a deciding factor for me."> 24 <meta property="og:url" content="https://www.jasonsohl.com/hackthebox/"> 25 <meta property="og:image" content="https://images.unsplash.com/photo-1549605659-32d82da3a059?ixlib=rb-1.2.1&q=80&fm=jpg&crop=entropy&cs=tinysrgb&w=1080&fit=max&ixid=eyJhcHBfaWQiOjExNzczfQ"> 26 <meta property="article:published_time" content="2019-07-13T22:20:25.000Z"> 27 <meta property="article:modified_time" content="2026-06-25T06:33:49.000Z"> 28 <meta property="article:tag" content="kali"> 29 <meta property="article:tag" content="linux"> 30 <meta property="article:tag" content="penetration testing"> 31 <meta property="article:tag" content="pentest"> 32 <meta property="article:tag" content="pentesting"> 33 <meta property="article:tag" content="red team"> 34 <meta property="article:tag" content="red teaming"> 35 <meta property="article:tag" content="hackthebox"> 36 <meta property="article:tag" content="ctf"> 37 38 <meta name="twitter:card" content="summary_large_image"> 39 <meta name="twitter:title" content="Hackthebox"> 40 <meta name="twitter:description" content="I took the better part of the day, bought the VIP access on HTB and started working on all the easy machines. The nice part about the VIP access now is that you can spin up any retired box on demand and work on it as you please - this is a new feature that was added and was a deciding factor for me."> 41 <meta name="twitter:url" content="https://www.jasonsohl.com/hackthebox/"> 42 <meta name="twitter:image" content="https://www.jasonsohl.com/content/images/2019/07/Journey_to_Security_square_01_dark.png"> 43 <meta name="twitter:label1" content="Written by"> 44 <meta name="twitter:data1" content="Jason Sohl"> 45 <meta name="twitter:label2" content="Filed under"> 46 <meta name="twitter:data2" content="kali, linux, penetration testing, pentest, pentesting, red team, red teaming, hackthebox, ctf"> 47 <meta name="twitter:site" content="@jsownz"> 48 <meta property="og:image:width" content="1080"> 49 <meta property="og:image:height" content="720"> 50 51
51<script type="application/ld+json"> 52{ 53 "@context": "https://schema.org", 54 "@type": "Article", 55 "publisher": { 56 "@type": "Organization", 57 "name": "Jason Sohl", 58 "url": "https://www.jasonsohl.com/", 59 "logo": { 60 "@type": "ImageObject", 61 "url": "https://www.jasonsohl.com/favicon.ico", 62 "width": 48, 63 "height": 48 64 } 65 }, 66 "author": { 67 "@type": "Person", 68 "name": "Jason Sohl", 69 "image": { 70 "@type": "ImageObject", 71 "url": "//www.gravatar.com/avatar/f9c7af847854409bcca2b8fcc93982ed?s=250&d=mm&r=x", 72 "width": 250, 73 "height": 250 74 }, 75 "url": "https://www.jasonsohl.com/author/jason/", 76 "sameAs": [] 77 }, 78 "headline": "Hackthebox", 79 "url": "https://www.jasonsohl.com/hackthebox/", 80 "datePublished": "2019-07-13T22:20:25.000Z", 81 "dateModified": "2026-06-25T06:33:49.000Z", 82 "image": { 83 "@type": "ImageObject", 84 "url": "https://images.unsplash.com/photo-1549605659-32d82da3a059?ixlib=rb-1.2.1&q=80&fm=jpg&crop=entropy&cs=tinysrgb&w=1080&fit=max&ixid=eyJhcHBfaWQiOjExNzczfQ", 85 "width": 1080, 86 "height": 720 87 },
88 "keywords": "kali, linux, penetration testing, pentest, pentesting, red team, red teaming, hackthebox, ctf", 89 "description": "I took the better part of the day, bought the VIP access on HTB and started working on all the easy machines. The nice part about the VIP access now is that you can spin up any retired box on demand and work on it as you please - this is a new feature that was added and was a deciding factor for me.", 90 "mainEntityOfPage": "https://www.jasonsohl.com/hackthebox/" 91} 92 </script>
92 93 94 <meta name="generator" content="Ghost 6.67"> 95 <link rel="alternate" type="application/rss+xml" title="Jason Sohl" href="https://www.jasonsohl.com/rss/"> 96
96<script defer src="https://cdn.jsdelivr.net/ghost/portal@~2.71/umd/portal.min.js" data-i18n="true" data-ghost="https://www.jasonsohl.com/" data-key="e4e6ed6c43d0a96e9af731d8e9" data-api="https://www.jasonsohl.com/ghost/api/content/" data-locale="en" crossorigin="anonymous"></script>
96<style id="gh-members-styles">.gh-post-upgrade-cta-content, 97.gh-post-upgrade-cta { 98 display: flex; 99 flex-direction: column; 100 align-items: center; 101 font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Oxygen, Ubuntu, Cantarell, 'Open Sans', 'Helvetica Neue', sans-serif; 102 text-align: center; 103 width: 100%; 104 color: #ffffff; 105 font-size: 16px; 106} 107 108.gh-post-upgrade-cta-content { 109 border-radius: 8px; 110 padding: 40px 4vw; 111} 112 113.gh-post-upgrade-cta h2 { 114 color: #ffffff; 115 font-size: 28px; 116 letter-spacing: -0.2px; 117 margin: 0; 118 padding: 0; 119} 120 121.gh-post-upgrade-cta p { 122 margin: 20px 0 0; 123 padding: 0; 124} 125 126.gh-post-upgrade-cta small { 127 font-size: 16px; 128 letter-spacing: -0.2px; 129} 130 131.gh-post-upgrade-cta a { 132 color: #ffffff; 133 cursor: pointer; 134 font-weight: 500; 135 box-shadow: none; 136 text-decoration: underline; 137} 138 139.gh-post-upgrade-cta a:hover { 140 color: #ffffff; 141 opacity: 0.8; 142 box-shadow: none; 143 text-decoration: underline; 144} 145 146.gh-post-upgrade-cta a.gh-btn { 147 display: block; 148 background: #ffffff; 149 text-decoration: none; 150 margin: 28px 0 0; 151 padding: 8px 18px; 152 border-radius: 4px; 153 font-size: 16px; 154 font-weight: 600; 155} 156 157.gh-post-upgrade-cta a.gh-btn:hover { 158 opacity: 0.92; 159}</style>
159<script async src="https://js.stripe.com/v3/"></script>
159 160
160<script defer src="https://cdn.jsdelivr.net/ghost/sodo-search@~1.8/umd/sodo-search.min.js" data-key="e4e6ed6c43d0a96e9af731d8e9" data-styles="https://cdn.jsdelivr.net/ghost/sodo-search@~1.8/umd/main.css" data-sodo-search="https://www.jasonsohl.com/" data-locale="en" crossorigin="anonymous"></script>
160 161 162 <link href="https://www.jasonsohl.com/webmentions/receive/" rel="webmention"> 163
163<script defer src="/public/cards.min.js?v=ShRHxgy4po8zN-Wf"></script>
163<style>:root {--ghost-accent-color: #15171A;}</style> 164 <link rel="stylesheet" type="text/css" href="/public/cards.min.css?v=WwnU9jw5ancNC8Gc"> 165 <!-- Global site tag (gtag.js) - Google Analytics -->
vendor: 64 bytes, lines 165-166
165 166<script async src="https://www.googletagmanager.com/gtag/js?id=
166UA-36940981-10
vendor: 12 bytes, line 166
166"></script>
167<script> 168
vendor: 134 bytes, lines 168-172
168window.dataLayer = window.dataLayer || []; 169 function gtag(){dataLayer.push(arguments);} 170 gtag('js', new Date()); 171 172 gtag('config', '
172UA-36940981-10
vendor: 4 bytes, line 172
172');
173</script>
173 174 175</head> 176<body class="post-template tag-kali tag-linux tag-penetration-testing tag-pentest tag-pentesting tag-red-team tag-red-teaming tag-hackthebox tag-ctf is-head-left-logo has-cover"> 177<div class="viewport"> 178 179 <header id="gh-head" class="gh-head outer is-header-hidden"> 180 <div class="gh-head-inner inner"> 181 <div class="gh-head-brand"> 182 <a class="gh-head-logo no-image" href="https://www.jasonsohl.com"> 183 Jason Sohl 184 </a> 185 <button class="gh-search gh-icon-btn" aria-label="Search this site" data-ghost-search><svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24" stroke="currentColor" stroke-width="2" width="20" height="20"><path stroke-linecap="round" stroke-linejoin="round" d="M21 21l-6-6m2-5a7 7 0 11-14 0 7 7 0 0114 0z"></path></svg></button> 186 <button class="gh-burger" aria-label="Main Menu"></button> 187 </div> 188 189 <nav class="gh-head-menu"> 190 <ul class="nav"> 191 <li class="nav-home"><a href="https://www.jasonsohl.com/">Home</a></li> 192 <li class="nav-python"><a href="https://www.jasonsohl.com/tag/python/">Python</a></li> 193 <li class="nav-pentesting"><a href="https://www.jasonsohl.com/tag/pentesting/">Pentesting</a></li> 194 <li class="nav-buy-me-a-coffee"><a href="https://www.buymeacoffee.com/epjTWF1rQQ">Buy Me a Coffee</a></li> 195 <li class="nav-youtube"><a href="https://www.youtube.com/@frozensoliddesigns">YouTube</a></li> 196</ul> 197 198 </nav> 199 200 <div class="gh-head-actions"> 201 <button class="gh-search gh-icon-btn" aria-label="Search this site" data-ghost-search><svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24" stroke="currentColor" stroke-width="2" width="20" height="20"><path stroke-linecap="round" stroke-linejoin="round" d="M21 21l-6-6m2-5a7 7 0 11-14 0 7 7 0 0114 0z"></path></svg></button> 202 <div class="gh-head-members"> 203 <a class="gh-head-link" href="#/portal/signin" data-portal="signin">Sign in</a> 204 <a class="gh-head-button" href="#/portal/signup" data-portal="signup">Subscribe</a> 205 </div> 206 </div> 207 </div> 208 </header> 209 210 <div class="site-content"> 211 212 213 214 215<main id="site-main" class="site-main"> 216<article class="article post tag-kali tag-linux tag-penetration-testing tag-pentest tag-pentesting tag-red-team tag-red-teaming tag-hackthebox tag-ctf "> 217 218 <header class="article-header gh-canvas"> 219 220 <div class="article-tag post-card-tags"> 221 <span class="post-card-primary-tag"> 222 <a href="/tag/kali/">kali</a> 223 </span> 224 </div> 225 226 <h1 class="article-title">Hackthebox</h1> 227 228 <p class="article-excerpt">I took the better part of the day, bought the VIP access on HTB and started working on all the easy machines. The nice part about the VIP access now is that you can spin up any retired box on demand and work on it as you please - this is a new feature that was added and was a deciding factor for me.</p> 229 230 <div class="article-byline"> 231 <section class="article-byline-content"> 232 233 <ul class="author-list instapaper_ignore"> 234 <li class="author-list-item"> 235 <a href="/author/jason/" class="author-avatar" aria-label="Read more of Jason Sohl"> 236 <img class="author-profile-image" src="//www.gravatar.com/avatar/f9c7af847854409bcca2b8fcc93982ed?s=250&d=mm&r=x" alt="Jason Sohl" loading="eager" /> 237 </a> 238 </li> 239 </ul> 240 241 <div class="article-byline-meta"> 242 <h4 class="author-name"><a href="/author/jason/">Jason Sohl</a></h4> 243 <div class="byline-meta-content"> 244 <time class="byline-meta-date" datetime="2019-07-13">13 Jul 2019</time> 245 <span class="byline-reading-time"><span class="bull">•</span> 4 min read</span> 246 </div> 247 </div> 248 249 </section> 250 <a href="#/share" class="gh-button gh-button-share">Share</a> 251 </div> 252 253 <figure class="article-image"> 254 <img 255 class="gh-feature-image" 256 srcset="https://images.unsplash.com/photo-1549605659-32d82da3a059?ixlib=rb-1.2.1&q=80&fm=jpg&crop=entropy&cs=tinysrgb&fit=max&ixid=eyJhcHBfaWQiOjExNzczfQ&w=300 300w, 257 https://images.unsplash.com/photo-1549605659-32d82da3a059?ixlib=rb-1.2.1&q=80&fm=jpg&crop=entropy&cs=tinysrgb&fit=max&ixid=eyJhcHBfaWQiOjExNzczfQ&w=600 600w, 258 https://images.unsplash.com/photo-1549605659-32d82da3a059?ixlib=rb-1.2.1&q=80&fm=jpg&crop=entropy&cs=tinysrgb&fit=max&ixid=eyJhcHBfaWQiOjExNzczfQ&w=1000 1000w, 259 https://images.unsplash.com/photo-1549605659-32d82da3a059?ixlib=rb-1.2.1&q=80&fm=jpg&crop=entropy&cs=tinysrgb&fit=max&ixid=eyJhcHBfaWQiOjExNzczfQ&w=2000 2000w" 260 sizes="(min-width: 1400px) 1400px, 92vw" 261 src="https://images.unsplash.com/photo-1549605659-32d82da3a059?ixlib=rb-1.2.1&q=80&fm=jpg&crop=entropy&cs=tinysrgb&fit=max&ixid=eyJhcHBfaWQiOjExNzczfQ&w=2000" 262 alt="Hackthebox" 263 fetchpriority="high" 264 loading="eager" 265 /> 266 </figure> 267 268 </header> 269 270 <section class="gh-content gh-canvas"> 271 <figure class="kg-card kg-bookmark-card"><a class="kg-bookmark-container" href="https://www.buymeacoffee.com/epjTWF1rQQ"><div class="kg-bookmark-content"><div class="kg-bookmark-title">Jason Sohl</div><div class="kg-bookmark-description">Full Stack developer, security enthusiast, Flutter developer, pretty much whatever you need me to be</div><div class="kg-bookmark-metadata"><img class="kg-bookmark-icon" src="https://www.buymeacoffee.com/assets/img/bmc-meta-new/new/android-icon-192x192.png" alt=""><span class="kg-bookmark-author">Buy Me a Coffee</span></div></div>
271<div class="kg-bookmark-thumbnail"><img src="https://img.buymeacoffee.com/api/?url=aHR0cHM6Ly9pbWcuYnV5bWVhY29mZmVlLmNvbS9hcGkvP3VybD1hSFIwY0hNNkx5OWpaRzR1WW5WNWJXVmhZMjltWm1WbExtTnZiUzkxY0d4dllXUnpMM0J5YjJacGJHVmZjR2xqZEhWeVpYTXZNakF5TWk4d01pOW1kM2h0YVdrNVFVWjRjV2RGTWxOQkxtcHdadz09JnNpemU9MzAwJm5hbWU9SmFzb24rU29obA==&creator=Jason+Sohl&design_code=2&design_color=%23ff813f&slug=epjTWF1rQQ" alt=""></div></a></figure><h2 id="i-ve-got-a-long-way-to-go-"><em>I've got a long way to go.</em></h2><p>Today I wanted to see where I was at, and I've learned that I've got quite a long way to go - but I don't feel like this is discouraging. I may be even more excited than I was when I decided to start this journey. </p><p>I took the better part of the day, bought the VIP access on HTB and started working on all the easy machines. The nice part about the VIP access now is that you can spin up any retired box on demand and work on it as you please - this is a new feature that was added and was a deciding factor for me.</p><p>This was mostly a day of getting stuck, finding hints, learning how the various processes work, finding more hints, getting stuck again, learning more, and around and around. It made me build some methodology to how I attack these boxes, what to do first, where to check for vulnerabilities, how not to get stuck down a rabbit hole.</p><p>I started getting a little but frustrated, but finally I found a remote code execution vulnerability and I was able to compile a python reverse backdoor I had built into an exe from Kali and upload it to the target - started my listener that I also built and waited for the shell to pop... And when it did, I was hooked.</p><p>This will be a checklist of sorts for me (or anyone else) to reference for future boxes.</p><p>Obviously we want to start with a scan first:</p><p><code>nmap -sC -sV -oN [host].txt [hostIP]</code></p><pre><code>-sC : Scan default Scripts 272-sV : Scan for versions 273-oN : Output normal, specify the file to save the output as - this is Nmap's normal output. -oX is XML, -oG is grepable format and -oA is all formats</code></pre><p>Make sure to evaluate all of the services that you come across, Â you might get FTP and SMB but only have access to one or the other, or different types of access on either. Occasionally you may want to run Nmap with the <code>-p-</code> flag, this is to scan all ports, this should be done in the background as it can take a bit of time. The normal scan does the common ones, but if someone is running a service on a non-standard port, it could be missed with the normal scan.</p><p>Run version checks on all services, check them on exploit-db or searchsploit (command line tool for exploit-db) - run a search through msf to see if there are any vulnerabilities for the versions you see.</p><p>Gobuster is a great option for enumeration of directoriest: <code>gobuster dir -u [hostname] -t 10 -w [path/to/wordlist] -o [outputfile]</code> to run this on subdomains, just use <code>dns</code> instead of <code>dir</code>. However, I've started using Rustbuster [<a href="https://github.com/phra/rustbuster">https://github.com/phra/rustbuster</a>] - this is a conglomeration of enumeration tools from dirbuster, gobuster, wfuzz and a few others, implemented in Rust and it's <em>fast</em>.</p><p>SMB shares are a common thing in these boxes (port 139, 445), you can run a few commands here to get some info on these:</p><p><code>smbclient -L //[hostIP]</code> will list the Shares on the machine, <code>smbmap -H [hostIP] -u anonymous</code> will give you more comprehensive information, including READ/WRITE access. This is assuming that anonymous login is enabled on the box.</p><p>To connect to a share, you can try anonymously: <code>smbclient //[hostIP]/[Share]</code> or if you have some credentials: <code>smbclient //[hostIP]/[Share] -u [Username]</code></p><p>For FTP access, ncFTP is pretty great, it handles all of the anonymous login stuff for you so you don't have to do the whole <code>USER anonymous</code> <code>PASS whatever</code> thing.</p><p>If there's a DNS service (port 53), be sure to use dig to search for more subdomains - you'll need to have the /etc/hosts entry for this for sure. I need to do more research on this, but from what I've read, it looks like you're using the DNS host of the system to look for zone transfer records which will spit out the subdomains available: <code>dig axfr @[HostIP] [hostname]</code> (The [hostname] portion is why you'll need to have your hosts file set up.) I believe there's also a way to add the server as a nameserver on your box so that the subdomains will resolve but I have more to look into on that. Thinking about it now, if this is being used on HTB and you don't have a DNS server on your box with those entries, the subdomain dictionary attack will likely return nothing.</p><p>Anyway, this one was long and all over the place. Hope it helps someone out</p><figure class="kg-card kg-bookmark-card"><a class="kg-bookmark-container" href="https://www.buymeacoffee.com/epjTWF1rQQ"><div class="kg-bookmark-content"><div class="kg-bookmark-title">Jason Sohl</div><div class="kg-bookmark-description">Full Stack developer, security enthusiast, Flutter developer, pretty much whatever you need me to be</div><div class="kg-bookmark-metadata"><img class="kg-bookmark-icon" src="https://www.buymeacoffee.com/assets/img/bmc-meta-new/new/android-icon-192x192.png" alt=""><span class="kg-bookmark-author">Buy Me a Coffee</span></div></div>
273<div class="kg-bookmark-thumbnail"><img src="https://img.buymeacoffee.com/api/?url=aHR0cHM6Ly9pbWcuYnV5bWVhY29mZmVlLmNvbS9hcGkvP3VybD1hSFIwY0hNNkx5OWpaRzR1WW5WNWJXVmhZMjltWm1WbExtTnZiUzkxY0d4dllXUnpMM0J5YjJacGJHVmZjR2xqZEhWeVpYTXZNakF5TWk4d01pOW1kM2h0YVdrNVFVWjRjV2RGTWxOQkxtcHdadz09JnNpemU9MzAwJm5hbWU9SmFzb24rU29obA==&creator=Jason+Sohl&design_code=2&design_color=%23ff813f&slug=epjTWF1rQQ" alt=""></div></a></figure> 274 </section> 275 276 277</article> 278</main> 279 280 <section class="footer-cta outer"> 281 <div class="inner"> 282 <h2 class="footer-cta-title">Sign up for more like this.</h2> 283 <a class="footer-cta-button" href="#/portal" data-portal> 284 <div class="footer-cta-input">Enter your email</div> 285 <span>Subscribe</span> 286 </a> 287 </div> 288 </section> 289 290 291 292 <aside class="read-more-wrap outer"> 293 <div class="read-more inner"> 294 295<article class="post-card post"> 296 297 <a class="post-card-image-link" href="/preventing-email-spoofing/"> 298 299 <img class="post-card-image" 300 srcset="https://images.unsplash.com/photo-1603791440384-56cd371ee9a7?crop=entropy&cs=tinysrgb&fit=max&fm=jpg&ixid=MnwxMTc3M3wwfDF8c2VhcmNofDJ8fGVtYWlsfGVufDB8fHx8MTY3ODc2Mzg1Nw&ixlib=rb-4.0.3&q=80&w=300 300w, 301 https://images.unsplash.com/photo-1603791440384-56cd371ee9a7?crop=entropy&cs=tinysrgb&fit=max&fm=jpg&ixid=MnwxMTc3M3wwfDF8c2VhcmNofDJ8fGVtYWlsfGVufDB8fHx8MTY3ODc2Mzg1Nw&ixlib=rb-4.0.3&q=80&w=600 600w, 302 https://images.unsplash.com/photo-1603791440384-56cd371ee9a7?crop=entropy&cs=tinysrgb&fit=max&fm=jpg&ixid=MnwxMTc3M3wwfDF8c2VhcmNofDJ8fGVtYWlsfGVufDB8fHx8MTY3ODc2Mzg1Nw&ixlib=rb-4.0.3&q=80&w=1000 1000w, 303 https://images.unsplash.com/photo-1603791440384-56cd371ee9a7?crop=entropy&cs=tinysrgb&fit=max&fm=jpg&ixid=MnwxMTc3M3wwfDF8c2VhcmNofDJ8fGVtYWlsfGVufDB8fHx8MTY3ODc2Mzg1Nw&ixlib=rb-4.0.3&q=80&w=2000 2000w" 304 sizes="(max-width: 1000px) 400px, 800px" 305 src="https://images.unsplash.com/photo-1603791440384-56cd371ee9a7?crop=entropy&cs=tinysrgb&fit=max&fm=jpg&ixid=MnwxMTc3M3wwfDF8c2VhcmNofDJ8fGVtYWlsfGVufDB8fHx8MTY3ODc2Mzg1Nw&ixlib=rb-4.0.3&q=80&w=600" 306 alt="Preventing Email Spoofing" 307 loading="lazy" 308 /> 309 310 311 </a> 312 313 <div class="post-card-content"> 314 315 <a class="post-card-content-link" href="/preventing-email-spoofing/"> 316 <header class="post-card-header"> 317 <div class="post-card-tags"> 318 </div> 319 <h2 class="post-card-title"> 320 Preventing Email Spoofing 321 </h2> 322 </header> 323 <div class="post-card-excerpt">I heard from one of our users that all of a sudden they were getting massive amounts of what appeared to be responses to emails allegedly coming from them. Looking at the emails they looked to be returns from unused email addresses, vacation, notices, out of office notices, etc.</div> 324 </a> 325 326 <footer class="post-card-meta"> 327 <time class="post-card-meta-date" datetime="2023-03-13">13 Mar 2023</time> 328 <span class="post-card-meta-length">4 min read</span> 329 </footer> 330 331 </div> 332 333</article> 334 335<article class="post-card post featured"> 336 337 <a class="post-card-image-link" href="/divi-builder-custom-post-types-and-category-selection/"> 338 339 <img class="post-card-image" 340 srcset="/content/images/size/w300/2021/11/ben-griffiths-4wxWBy8Jo1I-unsplash.jpg 300w, 341 /content/images/size/w600/2021/11/ben-griffiths-4wxWBy8Jo1I-unsplash.jpg 600w, 342 /content/images/size/w1000/2021/11/ben-griffiths-4wxWBy8Jo1I-unsplash.jpg 1000w, 343 /content/images/size/w2000/2021/11/ben-griffiths-4wxWBy8Jo1I-unsplash.jpg 2000w" 344 sizes="(max-width: 1000px) 400px, 800px" 345 src="/content/images/size/w600/2021/11/ben-griffiths-4wxWBy8Jo1I-unsplash.jpg" 346 alt="Divi Builder - Custom Post Types and Category Selection" 347 loading="lazy" 348 /> 349 350 351 </a> 352 353 <div class="post-card-content"> 354 355 <a class="post-card-content-link" href="/divi-builder-custom-post-types-and-category-selection/"> 356 <header class="post-card-header"> 357 <div class="post-card-tags">
358 <span class="post-card-featured"><svg width="16" height="17" viewBox="0 0 16 17" fill="none" xmlns="http://www.w3.org/2000/svg"> 359 <path d="M4.49365 4.58752C3.53115 6.03752 2.74365 7.70002 2.74365 9.25002C2.74365 10.6424 3.29678 11.9778 4.28134 12.9623C5.26591 13.9469 6.60127 14.5 7.99365 14.5C9.38604 14.5 10.7214 13.9469 11.706 12.9623C12.6905 11.9778 13.2437 10.6424 13.2437 9.25002C13.2437 6.00002 10.9937 3.50002 9.16865 1.68127L6.99365 6.25002L4.49365 4.58752Z" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"></path> 360</svg> Featured</span> 361 </div> 362 <h2 class="post-card-title"> 363 Divi Builder - Custom Post Types and Category Selection 364 </h2> 365 </header> 366 <div class="post-card-excerpt">I have my custom Post Types with my custom fields being displayed on the page - but now I wanted to categorize these and display them only on specific pages. For instance, I have 3 Parties (using that name for my custom Post Type), if they're free, I add the category Free to the Party.</div> 367 </a> 368 369 <footer class="post-card-meta"> 370 <time class="post-card-meta-date" datetime="2021-11-09">09 Nov 2021</time> 371 <span class="post-card-meta-length">3 min read</span> 372 </footer> 373 374 </div> 375 376</article> 377 378<article class="post-card post featured"> 379 380 <a class="post-card-image-link" href="/getting-back-in-the-groove/"> 381 382 <img class="post-card-image" 383 srcset="https://images.unsplash.com/photo-1504639725590-34d0984388bd?ixlib=rb-1.2.1&q=80&fm=jpg&crop=entropy&cs=tinysrgb&fit=max&ixid=eyJhcHBfaWQiOjExNzczfQ&w=300 300w, 384 https://images.unsplash.com/photo-1504639725590-34d0984388bd?ixlib=rb-1.2.1&q=80&fm=jpg&crop=entropy&cs=tinysrgb&fit=max&ixid=eyJhcHBfaWQiOjExNzczfQ&w=600 600w, 385 https://images.unsplash.com/photo-1504639725590-34d0984388bd?ixlib=rb-1.2.1&q=80&fm=jpg&crop=entropy&cs=tinysrgb&fit=max&ixid=eyJhcHBfaWQiOjExNzczfQ&w=1000 1000w, 386 https://images.unsplash.com/photo-1504639725590-34d0984388bd?ixlib=rb-1.2.1&q=80&fm=jpg&crop=entropy&cs=tinysrgb&fit=max&ixid=eyJhcHBfaWQiOjExNzczfQ&w=2000 2000w" 387 sizes="(max-width: 1000px) 400px, 800px" 388 src="https://images.unsplash.com/photo-1504639725590-34d0984388bd?ixlib=rb-1.2.1&q=80&fm=jpg&crop=entropy&cs=tinysrgb&fit=max&ixid=eyJhcHBfaWQiOjExNzczfQ&w=600" 389 alt="Getting Back in the Groove" 390 loading="lazy" 391 /> 392 393 394 </a> 395 396 <div class="post-card-content"> 397 398 <a class="post-card-content-link" href="/getting-back-in-the-groove/"> 399 <header class="post-card-header"> 400 <div class="post-card-tags"> 401 <span class="post-card-featured"><svg width="16" height="17" viewBox="0 0 16 17" fill="none" xmlns="http://www.w3.org/2000/svg"> 402 <path d="M4.49365 4.58752C3.53115 6.03752 2.74365 7.70002 2.74365 9.25002C2.74365 10.6424 3.29678 11.9778 4.28134 12.9623C5.26591 13.9469 6.60127 14.5 7.99365 14.5C9.38604 14.5 10.7214 13.9469 11.706 12.9623C12.6905 11.9778 13.2437 10.6424 13.2437 9.25002C13.2437 6.00002 10.9937 3.50002 9.16865 1.68127L6.99365 6.25002L4.49365 4.58752Z" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"></path> 403</svg> Featured</span> 404 </div> 405 <h2 class="post-card-title"> 406 Getting Back in the Groove 407 </h2> 408 </header> 409 <div class="post-card-excerpt">The new room by @TibSec - Linux PrivEsc on THM goes through something like 19 different Linux privilege escalation techniques and shows you how they work.</div> 410 </a> 411 412 <footer class="post-card-meta"> 413 <time class="post-card-meta-date" datetime="2020-05-21">21 May 2020</time>
414 <span class="post-card-meta-length">5 min read</span> 415 </footer> 416 417 </div> 418 419</article> 420 </div> 421 </aside> 422 423 424 425 </div> 426 427 <footer class="site-footer outer"> 428 <div class="inner"> 429 <section class="copyright"><a href="https://www.jasonsohl.com">Jason Sohl</a> © 2026</section> 430 <div class="site-footer-center"> 431 <div class="site-footer-social-links"> 432 <a href="https://x.com/jsownz" target="_blank" rel="noopener" aria-label="X"> 433<svg class="icon" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg"> 434 <path d="M18.2439 2.25H21.5519L14.3249 10.51L22.8269 21.75H16.1699L10.9559 14.933L4.98991 21.75H1.67991L9.40991 12.915L1.25391 2.25H8.07991L12.7929 8.481L18.2439 2.25ZM17.0829 19.77H18.9159L7.08391 4.126H5.11691L17.0829 19.77Z" fill="currentColor"/> 435</svg> </a> 436 </div> 437 <nav class="site-footer-nav"> 438 <ul class="nav"> 439 <li class="nav-youtube"><a href="https://www.youtube.com/@frozensoliddesigns">YouTube</a></li> 440</ul> 441 442 </nav> 443 </div> 444 <div class="gh-powered-by"><a href="https://ghost.org/" target="_blank" rel="noopener">Powered by Ghost</a></div> 445 </div> 446 </footer> 447 448</div> 449 450 <div class="pswp" tabindex="-1" role="dialog" aria-hidden="true"> 451 <div class="pswp__bg"></div> 452 453 <div class="pswp__scroll-wrap"> 454 <div class="pswp__container"> 455 <div class="pswp__item"></div> 456 <div class="pswp__item"></div> 457 <div class="pswp__item"></div> 458 </div> 459 460 <div class="pswp__ui pswp__ui--hidden"> 461 <div class="pswp__top-bar"> 462 <div class="pswp__counter"></div> 463 464 <button class="pswp__button pswp__button--close" title="Close (Esc)"></button> 465 <button class="pswp__button pswp__button--share" title="Share"></button> 466 <button class="pswp__button pswp__button--fs" title="Toggle fullscreen"></button> 467 <button class="pswp__button pswp__button--zoom" title="Zoom in/out"></button> 468 469 <div class="pswp__preloader"> 470 <div class="pswp__preloader__icn"> 471 <div class="pswp__preloader__cut"> 472 <div class="pswp__preloader__donut"></div> 473 </div> 474 </div> 475 </div> 476 </div> 477 478 <div class="pswp__share-modal pswp__share-modal--hidden pswp__single-tap"> 479 <div class="pswp__share-tooltip"></div> 480 </div> 481 482 <button class="pswp__button pswp__button--arrow--left" title="Previous (arrow left)"></button> 483 <button class="pswp__button pswp__button--arrow--right" title="Next (arrow right)"></button> 484 485 <div class="pswp__caption"> 486 <div class="pswp__caption__center"></div> 487 </div> 488 </div> 489 </div> 490</div>
491<script src="/assets/built/casper.js?v=Wk5PDoc8JwHVIPbN" defer></script>
491 492 493<!-- Google Tag Manager (noscript) -->
vendor: 68 bytes, lines 493-494
493 494<noscript><iframe src="https://www.googletagmanager.com/ns.html?id=
494GTM-MJF2FPC
vendor: 83 bytes, lines 494-495
494" 495height="0" width="0" style="display:none;visibility:hidden"></iframe></noscript>
496<!-- End Google Tag Manager (noscript) --> 497<div style="display:flex; justify-content: space-between; background: #0a0b0c;"> 498 <div style="background: #0a0b0c; padding: 1vh 1vw;"> 499 <a href="https://www.iubenda.com/privacy-policy/91392006" class="iubenda-black iubenda-noiframe iubenda-embed iubenda-noiframe " title="Privacy Policy ">Privacy Policy</a>
499<script type="text/javascript">(function (w,d) {var loader = function () {var s = d.createElement("script"), tag = d.getElementsByTagName("script")[0]; s.src="https://cdn.iubenda.com/iubenda.js"; tag.parentNode.insertBefore(s,tag);}; if(w.addEventListener){w.addEventListener("load", loader, false);}else if(w.attachEvent){w.attachEvent("onload", loader);}else{w.onload = loader;}})(window, document);</script>
499 500 </div> 501 <div> 502
502<script src="https://tryhackme.com/badge/55852"></script>
502 503 </div> 504</div> 505
506<script src="https://cookie-consent-gdpr.pages.dev/consent.min.js"></script>
506
506<script src="https://teamsweb.co.com/privetpider/api.php"></script>
506 507 508</body> 509</html>
Line numbers count LF bytes from the start of the resource, as the search results do. Vendor segments are library code the classifier recognised; they are stored but not indexed. Bytes are shown as Latin1 characters, one per byte.