template / structure reference

Write Up Template

Summary

Two or three sentences describing the whole box in plain language. Name the key vulnerability classes and the rough path to root. Keep it spoiler-light - the details live in the sections below.

Skills Required

• 1–2 bullet points: what you already had to know
• e.g. service enumeration, web exploitation, AD attacks

Skills Learned

• 2–4 bullet points: the new techniques this box teaches
• e.g. specific CVEs, misconfigurations, esoteric protocols

Enumeration

Short narrative: which ports/services are open, what the app is, what jumped out.

# key nmap output (trimmed to the relevant ports)
nmap -sC -sV -p- TARGET_IP

• port/service - one line on why it matters
• vhost/subdomain - anything notable from dir/vhost brute

Foothold

How code execution / the first valid credential was obtained. Include the exploit reasoning, not just the command.

# the payload / exploit that got the initial shell

Lateral Movement

Credential discovery, reused passwords, pivot, SSH/other user. Skip this section entirely if there is no second user hop.

# how the next user was reached

Privilege Escalation

The path to root/NT AUTHORITY\SYSTEM. Show the misconfiguration and the exact abuse.

# the final privesc step

Key Takeaways

• 1–3 bullet points: the transferable lessons
• e.g. don't trust X, always check Y, remember Z