CorvusDDosKRom
Hola!
◦ Soy Rafael Morinigo, apasionado por los CTF y la ciberseguridad. Me encanta analizar vulnerabilidades, resolver desafíos y aprender nuevas técnicas de hacking ético.
✓ E|HE EC-Council
✓ N|DE EC-Council
○ OSCP OffSec
Red Team Specialist CTF Player 
CorvusDDosKRom
HackTheBox
Lvl 54
Professional #70
Platinum
Season Aero
430
Points
28w
Streak
Actividad
66
Machines
0
Sherlocks
2
Challenges
0
Pro Labs
0
Mini Pro Labs
0
Fortress
Road to OSCP
OffSec PEN-200
Módulos PEN-200 0%
0
Módulos
0
Labs
66
HTB Mach.
Writeups Progress
Por Dificultad
14
Very Easy
31
Easy
15
Medium
5
Hard
3
Insane
Por Sistema Operativo
14
Windows
52
Linux
Writeups Recientes
Ver todosMachine
Dificultad
Tipo
OS
Plataforma
Tags
Hack The Box: Takeoff
Hard · Linux
Hack The Box Linux Hard
Linux Hard 
Hack The Box: DutyBound
Medium · Linux
Hack The Box Linux Medium
Linux Medium 
Hack The Box: Autopilot
Insane · Windows
Hack The Box Windows Insane
Windows Insane 
Hack The Box: Stream
Medium · Linux
Hack The Box Linux Medium
Linux Medium 
Hack The Box: Touch
Easy · Windows
Hack The Box Windows Easy
Windows Easy 
Hack The Box: Layover
Medium · Linux
Hack The Box Linux Medium
Linux Medium 
Hack The Box: TwoMillion
Easy · Linux
Hack The Box Linux Easy
Linux Easy 
Hack The Box: BlockSynergy
Insane · Linux
Hack The Box Linux Insane
Linux Insane 
Hack The Box: Nexus
Easy · Linux
Hack The Box Linux Easy
Linux Easy 
Hack The Box: Orion
Easy · Linux
Hack The Box Linux Easy
Linux Easy 
Hack The Box: DanglingTree
Medium · Windows
Hack The Box Windows
Windows 
Hack The Box: Cohort
Easy · Linux
Hack The Box Linux SSRF SSRF Bypass Marimo CVE-2026-39987 PackageKit CVE-2026-41651 D-Bus Escalada de Privilegios
Linux SSRF SSRF Bypass Marimo CVE-2026-39987 PackageKit CVE-2026-41651 D-Bus Escalada de Privilegios 
Hack The Box: DarkZeroReturns
Hard · Windows
Hack The Box Windows Linux Active Directory Handlebars SSTI AST Injection Gitea Kerberos Forest Trust SID Filtering Golden Ticket DCSync Escalada de Privilegios
Windows Linux Active Directory Handlebars SSTI AST Injection Gitea Kerberos Forest Trust SID Filtering Golden Ticket DCSync Escalada de Privilegios 
Hack The Box: Bedside
Medium · Linux
Hack The Box Linux pdfminer.six Pickle Deserialization CVE-2025-64512 Docker Path Traversal LFI PyTorch MONAI Privilege Escalation
Linux pdfminer.six Pickle Deserialization CVE-2025-64512 Docker Path Traversal LFI PyTorch MONAI Privilege Escalation 
Hack The Box: Paperwork
Easy · Linux
Hack The Box Linux LPD RFC 1179 Command Injection PJL Path Traversal Unix Socket SCM_RIGHTS Privilege Escalation
Linux LPD RFC 1179 Command Injection PJL Path Traversal Unix Socket SCM_RIGHTS Privilege Escalation 
Hack The Box: MakeSense
Medium · Linux
Hack The Box Linux WordPress XSS Whisper AI AES-GCM CVE-2026-26832 Tesseract OCR RCE
Linux WordPress XSS Whisper AI AES-GCM CVE-2026-26832 Tesseract OCR RCE 
Hack The Box: Enigma
Easy · Linux
Hack The Box Linux NFS IMAP Roundcube OpenSTAManager CVE-2025-69212 OliveTin CVE-2026-27626 Command Injection
Linux NFS IMAP Roundcube OpenSTAManager CVE-2025-69212 OliveTin CVE-2026-27626 Command Injection 
Hack The Box: Nimbus
Hard · Linux
Hack The Box Linux SSRF AWS LocalStack IMDSv1 SQS S3 Docker Cloud
Linux SSRF AWS LocalStack IMDSv1 SQS S3 Docker Cloud 
Hack The Box: Checkpoint
Medium · Windows
Hack The Box Active Directory SMB VSCode Extension AD Recycle Bin dMSA BadSuccessor bloodyAD Pass the Hash Volatility Memory Forensics Windows Server 2025
Active Directory SMB VSCode Extension AD Recycle Bin dMSA BadSuccessor bloodyAD Pass the Hash Volatility Memory Forensics Windows Server 2025 
Hack The Box: Connected
Easy · Linux
Hack The Box FreePBX SQL Injection RCE DAHDI incrontab Cron Abuse
FreePBX SQL Injection RCE DAHDI incrontab Cron Abuse 
Bugthrive: BlackTop
Easy · Linux
Bugthrive Redis Redis RCE Redis Rogue Server SSH Python Library Hijacking Cron Misconfiguration
Redis Redis RCE Redis Rogue Server SSH Python Library Hijacking Cron Misconfiguration 
Hack The Box: Blue
Easy · Windows
Hack The Box SMB EternalBlue MS17-010 Metasploit Windows 7
SMB EternalBlue MS17-010 Metasploit Windows 7 
Hack The Box: DevHub
Medium · Linux
Hack The Box MCP CVE-2026-23744 Jupyter WebSocket SSH
MCP CVE-2026-23744 Jupyter WebSocket SSH 
Hack The Box: Reactor
Easy · Linux
Hack The Box Web Next.js RCE CVE-2025-55182 React Server Components Prototype Pollution
Web Next.js RCE CVE-2025-55182 React Server Components Prototype Pollution 
HackTheBox: SmartHire
Medium · Linux
Hack The Box MLflow Pickle Deserialization RCE Model Registry cloudpickle Subdomain Enumeration Python Library Hijacking .pth File sudo SUID
MLflow Pickle Deserialization RCE Model Registry cloudpickle Subdomain Enumeration Python Library Hijacking .pth File sudo SUID 
HackTheBox: Helix
Medium · Linux
Hack The Box Apache NiFi CVE-2023-34468 RCE ExecuteScript Groovy Subdomain Enumeration SSH Key OPC UA Industrial Control Systems sudo
Apache NiFi CVE-2023-34468 RCE ExecuteScript Groovy Subdomain Enumeration SSH Key OPC UA Industrial Control Systems sudo 
Hack The Box: PingPong
Insane · Windows
Hack The Box Active Directory Forest Trust ADCS ESC13 ESC4 ESC1 gMSA JEA RBCD S4U2Proxy MSSQL GodPotato Kerberos BloodHound ligolo-ng Evil-WinRM certipy
Active Directory Forest Trust ADCS ESC13 ESC4 ESC1 gMSA JEA RBCD S4U2Proxy MSSQL GodPotato Kerberos BloodHound ligolo-ng Evil-WinRM certipy 
Hack The Box: Logging
Medium · Windows
Hack The Box Windows Active Directory IIS WSUS ESC17 ADCS Shadow Credentials DLL Hijacking Escalada de Privilegios
Windows Active Directory IIS WSUS ESC17 ADCS Shadow Credentials DLL Hijacking Escalada de Privilegios 
HackTheBox: Silentium
Easy · Linux
Hack The Box Flowise CVE-2025-58434 CVE-2025-59528 CVE-2025-8110 Gogs RCE Subdomain Enumeration MailHog SSH Tunnel
Flowise CVE-2025-58434 CVE-2025-59528 CVE-2025-8110 Gogs RCE Subdomain Enumeration MailHog SSH Tunnel 
HackTheBox: Garfield
Hard · Windows
Hack The Box Active Directory RODC RBCD Kerberos BloodHound ligolo-ng Rubeus scriptPath KERB-KEY-LIST Pass-the-Hash WinRM Evil-WinRM
Active Directory RODC RBCD Kerberos BloodHound ligolo-ng Rubeus scriptPath KERB-KEY-LIST Pass-the-Hash WinRM Evil-WinRM 
HackTheBox: DevArea
Medium · Linux
Hack The Box SOAP CVE-2022-46364 SSRF MTOM Hoverfly Middleware RCE Java JADX
SOAP CVE-2022-46364 SSRF MTOM Hoverfly Middleware RCE Java JADX 
HackTheBox: Postman
Easy · Linux
Hack The Box Redis SSH Key Write Webmin CVE-2019-12840 RCE
Redis SSH Key Write Webmin CVE-2019-12840 RCE 
HackTheBox: Eighteen
Easy · Windows
Hack The Box MSSQL PBKDF2 Password Spray BadSuccessor dMSA Kerberos WinRM Windows Server 2025
MSSQL PBKDF2 Password Spray BadSuccessor dMSA Kerberos WinRM Windows Server 2025 
HackTheBox: Kobold
Easy · Linux
Hack The Box RCE MCP Docker Docker Breakout SUID Virtual Host Enumeration GHSA-232v-j27c-5pp6
RCE MCP Docker Docker Breakout SUID Virtual Host Enumeration GHSA-232v-j27c-5pp6 
Hack The Box: VariaType
Medium · Linux
Hack The Box Git Exposed Virtual Host Enumeration Path Traversal fontTools CVE-2025-66034 CVE-2024-25082 CVE-2025-47273 FontForge setuptools Arbitrary File Write Command Injection Linux
Git Exposed Virtual Host Enumeration Path Traversal fontTools CVE-2025-66034 CVE-2024-25082 CVE-2025-47273 FontForge setuptools Arbitrary File Write Command Injection Linux 
HackTheBox: CCTV
Easy · Linux
Hack The Box Apache ZoneMinder CVE-2024-51482 SQL Injection SQLMap Bcrypt John motionEye CVE-2025-60787 Metasploit SSH Tunneling
Apache ZoneMinder CVE-2024-51482 SQL Injection SQLMap Bcrypt John motionEye CVE-2025-60787 Metasploit SSH Tunneling 
Hack The Box: Pirate
Hard · Windows
Hack The Box Windows Active Directory Pre2k gMSA RBCD SPN Hijacking Kerberos
Windows Active Directory Pre2k gMSA RBCD SPN Hijacking Kerberos 
DockerLabs: Internal
Fácil · Linux
DockerLabs Apache Command Injection WAF Bypass Fuerza Bruta SUID
Apache Command Injection WAF Bypass Fuerza Bruta SUID 
Hack The Box: Redeemer
Very Easy · Linux
Hack The Box Redis No Authentication Misconfiguration
Redis No Authentication Misconfiguration 
Hack The Box: Interpreter
Medium · Linux
Hack The Box Mirth Connect CVE-2023-43208 SSTI RCE Jetty Flask
Mirth Connect CVE-2023-43208 SSTI RCE Jetty Flask 
Hack The Box: Expressway
Easy · Linux
Hack The Box SSH IPsec IKEv1 PSK Cracking XAUTH
SSH IPsec IKEv1 PSK Cracking XAUTH 
Hack The Box: Dancing
Very Easy · Windows
Hack The Box SMB Anonymous Login Misconfiguration
SMB Anonymous Login Misconfiguration 
Hack The Box: Fawn
Very Easy · Linux
Hack The Box FTP Anonymous Login Misconfiguration
FTP Anonymous Login Misconfiguration 
Hack The Box: Meow
Very Easy · Linux
Hack The Box Telnet Misconfiguration Default Credentials
Telnet Misconfiguration Default Credentials 
Hack The Box: WingData
Easy · Linux
Hack The Box Web Apache SSH Wing FTP CVE-2025-47812 RCE Hash Cracking Vhost Fuzzing
Web Apache SSH Wing FTP CVE-2025-47812 RCE Hash Cracking Vhost Fuzzing 
Hack The Box: Conversor
Easy · Linux
Hack The Box Apache Flask Path Traversal File Upload Cronjob Abuse Source Code Disclosure SQLite Hash Cracking CVE-2024-48990 Sudo
Apache Flask Path Traversal File Upload Cronjob Abuse Source Code Disclosure SQLite Hash Cracking CVE-2024-48990 Sudo 
Hack The Box: Pterodactyl
Medium · Linux
Hack The Box nginx Subdomain Enumeration phpinfo CVE-2025-49132 Path Traversal PEARCMD RCE Webshell Hash Cracking CVE-2025-6018 CVE-2025-6019 Race Condition SUID
nginx Subdomain Enumeration phpinfo CVE-2025-49132 Path Traversal PEARCMD RCE Webshell Hash Cracking CVE-2025-6018 CVE-2025-6019 Race Condition SUID 
Hack The Box: Facts
Easy · Linux
Hack The Box Web MinIO S3 Enumeración Escalada de Privilegios
Web MinIO S3 Enumeración Escalada de Privilegios 
Hack The Box: Threat Index
Very Easy
Hack The Box Coding Python Scripting String Matching
Hack The Box: Cap
Easy · Linux
Hack The Box Web IDOR Capabilities Enumeración Escalada de Privilegios
Web IDOR Capabilities Enumeración Escalada de Privilegios 
Hack The Box: Oddly Even
Very Easy
Hack The Box Coding Python Scripting
The Hackers Labs: THLPWN
Principiante · Linux
The Hackers Labs Virtual Hosting Binary Analysis strings sudo
Virtual Hosting Binary Analysis strings sudo 
The Hackers Labs: Zapp
Principiante · Linux
The Hackers Labs FTP Anonymous FTP SSH
FTP Anonymous FTP SSH 
DockerLabs: BreakMySSH
Muy Fácil · Linux
DockerLabs SSH Hydra Fuerza Bruta
SSH Hydra Fuerza Bruta 
DockerLabs: BorazuwarahCTF
Muy Fácil · Linux
DockerLabs SSH Apache Hydra sudo Esteganografía Exiftool
SSH Apache Hydra sudo Esteganografía Exiftool 
DockerLabs: HedgeHog
Muy Fácil · Linux
DockerLabs SSH Apache Hydra sudo
SSH Apache Hydra sudo 
DockerLabs: Obsession
Muy Fácil · Linux
DockerLabs FTP SSH Hydra sudo vim Apache
FTP SSH Hydra sudo vim Apache 
DockerLabs: Tproot
Muy Fácil · Linux
DockerLabs FTP vsftpd CVE-2011-2523 Backdoor
FTP vsftpd CVE-2011-2523 Backdoor 
DockerLabs: Vacaciones
Muy Fácil · Linux
DockerLabs SSH Apache Hydra sudo
SSH Apache Hydra sudo 
DockerLabs: FirstHacking
Muy Fácil · Linux
DockerLabs FTP vsftpd 2.3.4 Backdoor Metasploit CVE-2011-2523
FTP vsftpd 2.3.4 Backdoor Metasploit CVE-2011-2523 
DockerLabs: Trust
Muy Fácil · Linux
DockerLabs Apache Gobuster Hydra SSH sudo vim
Apache Gobuster Hydra SSH sudo vim 
The Hackers Labs: TickTackRoot
Principiante · Linux
The Hackers Labs FTP Anonymous FTP Hydra SSH sudo timeout
FTP Anonymous FTP Hydra SSH sudo timeout 
The Hackers Labs: Microchoft
Principiante · Windows
The Hackers Labs SMB Exploit Eternalblue
SMB Exploit Eternalblue 
The Hackers Labs: Grillo
Principiante · Linux
The Hackers Labs Fuerza Bruta SSH Puttygen Escalada de Privilegios
Fuerza Bruta SSH Puttygen Escalada de Privilegios 
Hack The Box: Chemistry
Easy · Linux
Hack The Box Web RCE CVE-2024-23346 Path Traversal Flask
Web RCE CVE-2024-23346 Path Traversal Flask 
Hack The Box: Sea
Easy · Linux
Hack The Box Web WonderCMS XSS CVE-2023-41425 Hash Cracking
Web WonderCMS XSS CVE-2023-41425 Hash Cracking 
Hack The Box: Driver
Easy · Windows
Hack The Box SMB NTLM Responder Hash Cracking PrintNightmare CVE-2021-1675
SMB NTLM Responder Hash Cracking PrintNightmare CVE-2021-1675 
Hack The Box: TraceBack
Easy · Linux
Hack The Box Web Webshell Lua MOTD Escalada de Privilegios
Web Webshell Lua MOTD Escalada de Privilegios