Posts tagged with

HackTheBox - Precious Writeup

Precious is an easy Hack The Box Linux machine focused on Ruby exploitation. It features a vulnerable Ruby web app using pdfkit (CVE-2022-25765) that enables RCE. Plaintext credentials in a Gem config file allow lateral movement. The final privilege escalation uses insecure Ruby deserialization for root access.

HackTheBox - Chemistry Writeup

Chemistry is an easy Hack The Box Linux machine highlighting RCE in the pymatgen library (CVE-2024-23346) via a malicious CIF file upload. Cracked credentials allow SSH access as rosa. Privilege escalation is achieved by exploiting a path traversal in AioHTTP (CVE-2024-23334) for arbitrary file read, revealing the root flag.

HackTheBox - Surveillance Writeup

Surveillance is a medium-difficulty Linux machine featuring Craft CMS [CVE-2023-41892] PHP object injection for initial access. Privilege escalation involves authenticated RCE in ZoneMinder and a sudo misconfiguration using LD_PRELOAD, leading to root access.

HackTheBox - MonitorsTwo Writeup

MonitorsTwo is an easy Hack The Box Linux machine featuring pre-auth RCE via a malicious X-Forwarded-For header, leading to a Docker container shell. A misconfigured SUID capsh binary grants root in the container. Cracked MySQL credentials allow SSH access to the host. Privilege escalation is achieved by exploiting Docker CVE-2021-41091 to access container-mounted files and reuse a SUID Bash binary.

HackTheBox - Busqueda Writeup

Busqueda is an easy Hack The Box Linux machine involving command injection in a Python module for initial access. Credentials found in a Git config file provide access to a local Gitea instance. A system checkup script with root permissions exposes Docker container credentials for the Gitea admin. Abusing a relative path vulnerability in the script leads to root RCE and full privilege escalation.

HackTheBox - Sense Writeup

Sense is an easy Hack The Box Linux machine featuring a vulnerable pfSense firewall. Although a public PoC exploit exists, it is unreliable. A more stable approach using the same pfSense vulnerability is required to gain remote access. Once exploited, it provides a straightforward path to root.

HackTheBox - Shocker Writeup

Shocker is a simple Hack The Box machine that highlights the critical impact of the Shellshock vulnerability, which once affected millions of public-facing servers worldwide.

HackTheBox - Arctic Writeup

Arctic is an easy Hack The Box Windows machine featuring a vulnerable Adobe ColdFusion server. Initial access is gained via an unauthenticated file upload exploit. After obtaining a reverse shell, privilege escalation is achieved using the MS10-059 vulnerability, resulting in full system compromise.

HackTheBox - Validation Writeup

HackTheBox - Optimum Writeup

Optimum is a beginner-level machine on Hack The Box that emphasizes service enumeration and exploitation. It features easy-to-exploit vulnerabilities with available Metasploit modules, making the machine straightforward to complete.

HackTheBox - Netmon Writeup

Netmon is an easy Windows machine on Hack The Box featuring simple enumeration and exploitation. It runs PRTG Network Monitor alongside an FTP server with anonymous access, allowing retrieval of PRTG config files. A known RCE vulnerability in the PRTG version is exploited to gain a SYSTEM-level shell.

HackTheBox - Responder Writeup

Responder is a free starting-point machine. This machine teaches us how to use the responder utility to steal the password hash and crack it with hashcat. On top of that, this machine is also vulnerable to local file inclusion. Which we can exploit through log poisoning to gain remote code execution and get the reverse shell.

HackTheBox - Beep Writeup

Beep is an easy Hack The Box (HTB) Linux machine with numerous exposed services, making initial enumeration challenging. Despite the noise, multiple clear exploitation paths exist for gaining access and escalating privileges.

HackTheBox - Knife Writeup

Knife is an easy Hack The Box Linux machine running a backdoored version of PHP, which is exploited to gain a foothold via remote code execution. Post-exploitation enumeration reveals a sudo misconfiguration that allows privilege escalation to root without a password, resulting in full system compromise.

HackTheBox - Vaccine Writeup

Starting Point Machine