A Pilgrim's Progress: Exploiting ImageMagick and Binwalk on Pilgrimage
Easy rated linux box from hackthebox comprising of .git directory, magick binary for file read and binwalk for privilege escalation....
Web
Beyond the Blog: Exploiting WordPress CVEs on HTB 'MetaTwo'
Write-up for ‘MetaTwo’, a box that involves exploiting WordPress CVEs with multiple vectors (SQLi, XXE, LFI) for foothold, and then leveraging passpie for root privilege escalation.
Forging the One Shell: A PDFKit RCE on HTB 'Precious'
Easy rated box from hackthebox comprising of a Ruby pdfkit RCE for foothold and a sudo misconfiguration for privilege escalation.
From Forged Requests to Pager Escapes on HTB 'Sau'
Easy rated linux box from hackthebox comprising of an SSRF leading to RCE for foothold, and a systemctl less pager escape for privilege escalation.
Scoring with WebSockets: A Winning Goal on HTB 'Soccer'
Easy rated linux box from hackthebox comprising sqli, tiny file manager rce and doas for privilege escalation.
The Path to Root: Hijacking the Search on HTB 'Busqueda'
Easy rated linux box ‘Busqueda’ from hackthebox comprising of command injection for foothold, credentials reuse for internal subdomain and insecure code executing a relative path script as root leading to privilege escalation....
Beyond the Interface: Escalating with a Bash Operator Flaw
Easy rated linux box from hackthebox with hidden directories leading to RCE for foothold, and bash operator evaluation for privilege escalation.
From Spring Boot LFI to Ansible Root: A Guide to HTB 'Inject'
Easy rated linux box from hackthebox with Springboot application for foothold and ansible for privilege escalation.