Posts tagged with

GTFOBins

HackTheBox - CozyHosting Writeup

CozyHosting is an easy Hack The Box Linux machine running a Spring Boot app with exposed Actuator endpoints. Session hijacking grants dashboard access, and a command injection vulnerability provides a reverse shell. Hardcoded credentials in the JAR file reveal a database hash, which, once cracked, allows SSH access as josh. The user can run ssh as root, leading to full privilege escalation.

S SH∆FIQ∆IM∆N
February 23, 2025
1 min read

spring-boot-error spring-boot gobuster PostgreSQL hashcat GTFOBins
HackTheBox - MonitorsTwo Writeup

MonitorsTwo is an easy Hack The Box Linux machine featuring pre-auth RCE via a malicious X-Forwarded-For header, leading to a Docker container shell. A misconfigured SUID capsh binary grants root in the container. Cracked MySQL credentials allow SSH access to the host. Privilege escalation is achieved by exploiting Docker CVE-2021-41091 to access container-mounted files and reuse a SUID Bash binary.

S SH∆FIQ∆IM∆N
September 3, 2023
1 min read

CVE-2022-46169 CVE-2021-41091 upgrade-shell-using-script rce GTFOBins capsh mysql john docker
HackTheBox - Shocker Writeup

Shocker is a simple Hack The Box machine that highlights the critical impact of the Shellshock vulnerability, which once affected millions of public-facing servers worldwide.

S SH∆FIQ∆IM∆N
November 5, 2022
1 min read

CVE-2014-6271 gobuster shellshock GTFOBins rce python cgi-bin
HackTheBox - Beep Writeup

Beep is an easy Hack The Box (HTB) Linux machine with numerous exposed services, making initial enumeration challenging. Despite the noise, multiple clear exploitation paths exist for gaining access and escalating privileges.

S SH∆FIQ∆IM∆N
January 21, 2022
1 min read

lfi rce ssh gobuster svwar/sipvicious GTFOBins python SUID elastix freepbx
HackTheBox - Knife Writeup

Knife is an easy Hack The Box Linux machine running a backdoored version of PHP, which is exploited to gain a foothold via remote code execution. Post-exploitation enumeration reveals a sudo misconfiguration that allows privilege escalation to root without a password, resulting in full system compromise.

S SH∆FIQ∆IM∆N
January 15, 2022
1 min read

GTFOBins rce gobuster PHP/8.1.0-dev php-backdoor
HackTheBox - Base Writeup

Starting Point Machine

S SH∆FIQ∆IM∆N
August 13, 2021
1 min read

strcmp-bypass upload-vuln GTFOBins gobuster SUID
HackTheBox - Vaccine Writeup

Starting Point Machine

S SH∆FIQ∆IM∆N
July 21, 2021
1 min read

sqlmap sql-union sqli GTFOBins ftp rce zip2john john crackstation python PostgreSQL