Posts tagged with

python

HackTheBox - Busqueda Writeup

Busqueda is an easy Hack The Box Linux machine involving command injection in a Python module for initial access. Credentials found in a Git config file provide access to a local Gitea instance. A system checkup script with root permissions exposes Docker container credentials for the Gitea admin. Abusing a relative path vulnerability in the script leads to root RCE and full privilege escalation.

S SH∆FIQ∆IM∆N
July 8, 2023
1 min read

python mysql gitea rce searchor 2.4.0 docker docker-inspect
HackTheBox - Sense Writeup

Sense is an easy Hack The Box Linux machine featuring a vulnerable pfSense firewall. Although a public PoC exploit exists, it is unreliable. A more stable approach using the same pfSense vulnerability is required to gain remote access. Once exploited, it provides a straightforward path to root.

S SH∆FIQ∆IM∆N
November 13, 2022
1 min read

CVE-2014-4688 pfsense-default-creds pfsense gobuster python rce
HackTheBox - Shocker Writeup

Shocker is a simple Hack The Box machine that highlights the critical impact of the Shellshock vulnerability, which once affected millions of public-facing servers worldwide.

S SH∆FIQ∆IM∆N
November 5, 2022
1 min read

CVE-2014-6271 gobuster shellshock GTFOBins rce python cgi-bin
HackTheBox - Beep Writeup

Beep is an easy Hack The Box (HTB) Linux machine with numerous exposed services, making initial enumeration challenging. Despite the noise, multiple clear exploitation paths exist for gaining access and escalating privileges.

S SH∆FIQ∆IM∆N
January 21, 2022
1 min read

lfi rce ssh gobuster svwar/sipvicious GTFOBins python SUID elastix freepbx
HackTheBox - Vaccine Writeup

Starting Point Machine

S SH∆FIQ∆IM∆N
July 21, 2021
1 min read

sqlmap sql-union sqli GTFOBins ftp rce zip2john john crackstation python PostgreSQL
HackTheBox - Oopsie Writeup

Starting Point Machine

S SH∆FIQ∆IM∆N
July 20, 2021
1 min read

SUID path-abused upload-vuln gobuster python php-reverse-shell