Want a performance boost using PHP PDO + PostgreSQL without optimizing your queries or code? Then you should enable the driver-specific PGSQL_ATTR_DISABLE_PREPARES option.

I’d say Devzat is a nice machine to start with. It requires basic scanning techniques, but the clues are rather obvious and easy to follow.

This machine might be interesting to those who don’t like the repetitive and rather boring task of scanning a host - because it doesn’t require any of that.

The now retired Backdoor machine on HackTheBox is supposed to be an “easy” machine, so it should be absolutely straight-forward. Let’s see!

This is my first walkthrough for a HackTheBox machine. It’s not the first machine I’ve done, though. But as Shibboleth is now “retired”, it is allowed to publish walkthroughs. I have decided not to publish any passwords, because that would spoil the fun (and not add anything in terms of learning). I’ll rather focus on my chain of thought to go through this challenge.