tag #HackTheBox
8 posts · browse all
- HackTheBox: Debugging Interface (locked)
- HackTheBox: The Needle (locked)
- HackTheBox: lowlogic (locked)
- HackTheBox: Espresso (locked)
- HackTheBox: CCTV (locked)
- HackTheBox: Kobold (locked)
- HackTheBox: Wingdata exploiting CVE-2025-47812 lua injection in WingFTP for RCE, cracking a salted sha256 hash, then abusing CVE-2025-4138 PATH_MAX overflow to escape tarfile filter and get root
- HackTheBox: Pterodactyl (pinned) exploiting a Pterodactyl game panel via path traversal, PAM environment poisoning, and a udisks2 XFS resize bug to get root