#BoxFriday34 - Sniper (Medium)

We’re closing out the year at HTB KE with a bang as we tackle Sniper, a medium-difficulty Windows machine packed with classic and fun exploitation techniques! 🎯 In this final session, we’ll explore file inclusion vulnerabilities, turn PHP sessions into command execution, pivot using exposed credentials, and finish strong by capturing and cracking a NetNTLMv2 hash to gain full administrator access. It’s a perfect mix of web, Windows, and post-exploitation skills—and a great way to wrap up the year together. Join us for one last hack, lots of learning, and a proper send-off to an awesome year! 🚀