Posts tagged with

php-reverse-shell

HackTheBox - Devvortex Writeup

Devvortex is an easy Hack The Box Linux machine running Joomla CMS vulnerable to info disclosure. The config file exposes plaintext admin credentials, enabling template injection for RCE. Cracked database hashes grant SSH access. Privilege escalation is achieved via apport-cli, run as root.

S SH∆FIQ∆IM∆N
February 16, 2025
1 min read

ffuf ffuf-vhost gobuster joomla! php-reverse-shell mysql hashcat apport-cli CVE-2023-1326 CVE-2023-26604 CVE-2023-23752
HackTheBox - Bank Writeup

Bank is an easy Hack The Box Linux machine featuring a custom PHP banking app. An exposed /balance-transfer endpoint leaks valid credentials via an improperly encrypted .acc file. Authenticated access reveals a file upload bypass using a .htb extension, leading to RCE as www-data. Privilege escalation is achieved by exploiting a custom SUID binary (/var/htb/bin/emergency) to gain root access.

S SH∆FIQ∆IM∆N
October 15, 2022
1 min read

upload-vuln gobuster php-reverse-shell SUID
HackTheBox - Nibbles Writeup

Nibbles is an easy Hack The Box Linux machine featuring a custom blogging platform. A login blacklist adds a slight challenge, but username enumeration and basic password guessing lead to access. Once logged in, a vulnerable file upload function enables Remote Code Execution, resulting in a shell. Privilege escalation is achieved via a poorly secured root script.

S SH∆FIQ∆IM∆N
October 3, 2022
1 min read

CVE-2015-6967 nibbleblog php-reverse-shell gobuster upload-vuln
HackTheBox - Included Writeup

Starting Point Machine

S SH∆FIQ∆IM∆N
July 29, 2021
1 min read

lfi tftp lxd-alpine php-reverse-shell
HackTheBox - Oopsie Writeup

Starting Point Machine

S SH∆FIQ∆IM∆N
July 20, 2021
1 min read

SUID path-abused upload-vuln gobuster python php-reverse-shell