Posts tagged with

SUID

HackTheBox - Bank Writeup

Bank is an easy Hack The Box Linux machine featuring a custom PHP banking app. An exposed /balance-transfer endpoint leaks valid credentials via an improperly encrypted .acc file. Authenticated access reveals a file upload bypass using a .htb extension, leading to RCE as www-data. Privilege escalation is achieved by exploiting a custom SUID binary (/var/htb/bin/emergency) to gain root access.

S SH∆FIQ∆IM∆N
October 15, 2022
1 min read

upload-vuln gobuster php-reverse-shell SUID
HackTheBox - Beep Writeup

Beep is an easy Hack The Box (HTB) Linux machine with numerous exposed services, making initial enumeration challenging. Despite the noise, multiple clear exploitation paths exist for gaining access and escalating privileges.

S SH∆FIQ∆IM∆N
January 21, 2022
1 min read

lfi rce ssh gobuster svwar/sipvicious GTFOBins python SUID elastix freepbx
HackTheBox - Base Writeup

Starting Point Machine

S SH∆FIQ∆IM∆N
August 13, 2021
1 min read

strcmp-bypass upload-vuln GTFOBins gobuster SUID
HackTheBox - Oopsie Writeup

Starting Point Machine

S SH∆FIQ∆IM∆N
July 20, 2021
1 min read

SUID path-abused upload-vuln gobuster python php-reverse-shell