A Pilgrim's Progress: Exploiting ImageMagick and Binwalk on Pilgrimage
Easy rated linux box from hackthebox comprising of .git directory, magick binary for file read and binwalk for privilege escalation....
Easy
Beyond the Blog: Exploiting WordPress CVEs on HTB 'MetaTwo'
Write-up for ‘MetaTwo’, a box that involves exploiting WordPress CVEs with multiple vectors (SQLi, XXE, LFI) for foothold, and then leveraging passpie for root privilege escalation.
Forging the One Shell: A PDFKit RCE on HTB 'Precious'
Easy rated box from hackthebox comprising of a Ruby pdfkit RCE for foothold and a sudo misconfiguration for privilege escalation.
From Forged Requests to Pager Escapes on HTB 'Sau'
Easy rated linux box from hackthebox comprising of an SSRF leading to RCE for foothold, and a systemctl less pager escape for privilege escalation.
Scoring with WebSockets: A Winning Goal on HTB 'Soccer'
Easy rated linux box from hackthebox comprising sqli, tiny file manager rce and doas for privilege escalation.
The Path to Root: Hijacking the Search on HTB 'Busqueda'
Easy rated linux box ‘Busqueda’ from hackthebox comprising of command injection for foothold, credentials reuse for internal subdomain and insecure code executing a relative path script as root leading to privilege escalation....
Beyond the Interface: Escalating with a Bash Operator Flaw
Easy rated linux box from hackthebox with hidden directories leading to RCE for foothold, and bash operator evaluation for privilege escalation.
From gRPC SQLi to Pyload Root: A Guide to HTB 'PC'
Easy rated linux box from hackthebox comprising of gRPC and SQLi for foothold, and a misconfigured Pyload for privilege escalation.
From Spring Boot LFI to Ansible Root: A Guide to HTB 'Inject'
Easy rated linux box from hackthebox with Springboot application for foothold and ansible for privilege escalation.