Posts tagged with

lfi

HackTheBox - Chemistry Writeup

Chemistry is an easy Hack The Box Linux machine highlighting RCE in the pymatgen library (CVE-2024-23346) via a malicious CIF file upload. Cracked credentials allow SSH access as rosa. Privilege escalation is achieved by exploiting a path traversal in AioHTTP (CVE-2024-23334) for arbitrary file read, revealing the root flag.

S SH∆FIQ∆IM∆N
March 9, 2025
1 min read

ssh-port-forward sqlite-dump CVE-2024-23346 CVE-2024-23334 aiohttp-3.9.1 crackstation lfi rce cif-file
HackTheBox - Arctic Writeup

Arctic is an easy Hack The Box Windows machine featuring a vulnerable Adobe ColdFusion server. Initial access is gained via an unauthenticated file upload exploit. After obtaining a reverse shell, privilege escalation is achieved using the MS10-059 vulnerability, resulting in full system compromise.

S SH∆FIQ∆IM∆N
October 8, 2022
1 min read

CVE-2009-2265 juicy-potato seImpersonatePrivilege coldfusion rce smbserver.py upload-vuln lfi jsp-reverse-shell msfvenom
HackTheBox - Responder Writeup

Responder is a free starting-point machine. This machine teaches us how to use the responder utility to steal the password hash and crack it with hashcat. On top of that, this machine is also vulnerable to local file inclusion. Which we can exploit through log poisoning to gain remote code execution and get the reverse shell.

S SH∆FIQ∆IM∆N
April 9, 2022
1 min read

lfi rce log-poisoning responder.py NTLMv2 hashcat reverse-powershell php-webshell evil-winrm steal-NTLMv2
HackTheBox - Beep Writeup

Beep is an easy Hack The Box (HTB) Linux machine with numerous exposed services, making initial enumeration challenging. Despite the noise, multiple clear exploitation paths exist for gaining access and escalating privileges.

S SH∆FIQ∆IM∆N
January 21, 2022
1 min read

lfi rce ssh gobuster svwar/sipvicious GTFOBins python SUID elastix freepbx
HackTheBox - Included Writeup

Starting Point Machine

S SH∆FIQ∆IM∆N
July 29, 2021
1 min read

lfi tftp lxd-alpine php-reverse-shell