Eric Hogue

Every month (or so), I host a @hackthebox meetup with the @hackfest@infosec.exchange community. I share my screen and we hack a machine together, live. The first Wednesday of the month is in French, the second in English.

The format is beginner-friendly: we tackle Easy or Medium rated machines. Since I only pick machines I've already completed, we avoid getting stuck for too long — the goal is to learn and improve together.

Interested? Sign up on Meetup (https://www.meetup.com/hack-the-box-meetup-quebec-qc-canada/) and join the #mob-hacking-nights channel on the Hackfest Discord (https://discord.com/channels/724131514161561653/1417514329355325511).

Tonight is the French edition — we're tackling the RedPanda (https://app.hackthebox.com/machines/RedPanda) box. See you there! Next week is the English edition — same box, same format, same fun. Hope to see you too!

Only 150 pushups left

There are only 2 days and 350 pushups left.

I am participating in the 2000 pushups challenge to raise money for the Canadian Mental Health Association.

If you have some money to give, you can do it here https://www.thepushupchallenge.ca/fundraisers/erichogue/the-push-up-challenge

I published my walkthrough for Artificial on #HackTheBox. In this box, I used Remote Code Execution to get a shell, cracked some password hashes, and exploited a backup application to elevate my privileges.

https://erichogue.ca/2025/10/HTB/Artificial

We're back home after another amazing @hackfest@infosec.exchange . My son and I had a great time attending talks, watching the social engineering contest, and participating in the Hackfest Generation village.

A huge thank you to the organizers, volunteers, speakers, and sponsors. We're already looking forward to next year. My wife and my other son might even come with us this time.

@sean@scoat.es if someone wants them, I'm happy to give them away. If not, they are going to renaissance.

I'm also getting rid of all those elephpants. We need to get rid of all the clutter.

I'm throwing away my conference badges I kept for many years. Looking at the pile of lanyards, it looks like I went to quite a few conferences.

I also have a few electronic badges that are still in a box somewhere.

J'ai beaucoup aimé l'épisode panel du BSides de @polysecure@infosec.exchange . Les panels sont toujours excellents.

Et quel excellent titre: Les boeufs sont lents mais la terre est patiente.

Par contre j'ai du avoir l'air un peu fou à rire tout seul au gym.

https://polysecure.ca/posts/episode-0x631.html#42f70523

@aviskase@infosec.exchange I use rustscan and feroxbuser because they are pretty quick. Also feroxbuster is recursive out of the box. I use wfuzz because I'm lazy. I know ffuf would probably do a better job. Byt wfuzz is in my history, so I just use ctrl-r to get the command. Pure lazynes. Yes, reverse shell works well. I enjoy the suid bash, but both get similar results.

I published my walkthrough for Planning on #HackTheBox.

In this box, I had to exploit a known vulnerability in Grafana to get a shell, find some credentials to get a user connection. And finally exploit an application to manage cron jobs to get root.

https://erichogue.ca/2025/09/HTB/Planning

J'aime beaucoup de dernier épisode de @polysecure@infosec.exchange avec @mrun1k0d3r@bird.makeup https://polysecure.ca/posts/episode-0x615.html#9fda03be

I published my walkthrough for Code on HTB. In this box I got a shell by exploiting an application that allowed running Python code. Then I cracked a password and used a backup utility to elevate my privileges up to root.

https://erichogue.ca/2025/08/HTB/Code

I published my first @NorthSec@infosec.exchange CTF write up of the year. For the LED Display Controller track by Marc Olivier Bergeron. It was a fun one.

https://erichogue.ca/2025/05/NorthSec/LedDisplayController

@NorthSec@infosec.exchange was awesome again this year. I learned a ton and I'm already looking forward to next year.

A huge thank you to everyone involved in making the event. You folks rock!

And thanks to my CTF team. It's always fun competing with you.

@shellsharks Thanks for including me in the list. Not sure I belong there, but it's pretty cool.