Posts tagged with

pspy

HackTheBox - Topology Writeup

Topology is an easy Hack The Box Linux machine featuring a vulnerable LaTeX web app with a Local File Inclusion (LFI) flaw. The LFI exposes an .htpasswd file containing a crackable hash, leading to SSH access. Privilege escalation is achieved via a root cronjob that executes malicious gnuplot files.

S SH∆FIQ∆IM∆N
March 30, 2025
1 min read

latex formula .htpasswd hashcat gnuplot pspy ffuf-vhost
HackTheBox - Codify Writeup

Codify is an easy Hack The Box Linux machine featuring a Node.js code execution app using a vulnerable vm2 library, allowing RCE. A SQLite database reveals a crackable hash, granting SSH access. Privilege escalation is achieved via a misconfigured Bash script that exposes the root password.

S SH∆FIQ∆IM∆N
March 2, 2025
1 min read

nodejs vm2 vm2-v3.9.16 hashcat wildcard-injection pspy
HackTheBox - Pilgrimage Writeup

Pilgrimage is an easy Hack The Box Linux machine with a web app exposing a Git repository. Source code analysis reveals a vulnerable ImageMagick version, allowing arbitrary file read via a crafted PNG. This exposes a SQLite DB with SSH credentials. Privilege escalation is achieved by exploiting CVE-2022-4510 in a root-executed Binwalk script, resulting in root RCE.

S SH∆FIQ∆IM∆N
November 25, 2023
1 min read

CVE-2022-44268 CVE-2022-4510 git-dumper pngcrush exiftool binwalk pspy
HacktheBox - Late Writeup

Late is an easy Hack The Box Linux machine with a Server Side Template Injection (SSTI) vulnerability in a text reader app, leading to Remote Code Execution as user svc_acc. Enumeration reveals a root-owned script triggered on SSH login/logout. Although the script can’t be edited, data can be appended, allowing a reverse shell to be added for root access.

S SH∆FIQ∆IM∆N
July 30, 2022
1 min read

linpeas ssti pspy