Tag
linux
14 posts
Hack The Box - Monitored
November 01, 2024Monitored is a Linux machine running an instance of Nagios XI. A username and password for Nagios can be discovered from SNMP data, which…
Hack The Box - Blurry
October 21, 2024Blurry is a Linux machine running an application with a vulnerable version of ClearML, which contains a deserialization flaw (CVE-2024-2459…
Hack The Box - EvilCUPS
October 15, 2024EvilCUPS is a Linux machine affected by several vulnerabilities discovered in CUPS (Common Unix Printing System) in September 2024. These…
Hack The Box - Builder
August 29, 2024Builder is a Linux machine running a version of Jenkins with an arbitrary file read vulnerability via the CLI (CVE-2024-23897). This…
Hack The Box - Visual
August 03, 2024Visual is a Windows machine hosting a website that compiles Visual Studio projects from a remote Git repository. Command execution on the…
Hack The Box - Cronos
August 25, 2023Cronos is a Linux machine hosting a website with an admin subdomain that contains a login form with a SQL injection vulnerability. After…
Hack The Box - Topology
July 13, 2023Topology is a Linux machine hosting a website with a PNG image generator based on LaTeX inline math mode commands. This feature can be…
Hack The Box - Inject
July 07, 2023Inject is a Linux machine hosting a cloud storage and collaboration app built with Java and the Spring framework. A route on the app has a…
Hack The Box - MonitorsTwo
July 04, 2023MonitorsTwo is a Linux machine with a web application that uses Cacti, a web based monitoring and fault management framework. The version of…
Hack The Box - Busqueda
June 29, 2023Busqueda is a Linux machine featuring a web application that provides users with a URL for a variety of search engines across the web with…
Hack The Box - PC
June 20, 2023PC is a Linux machine with an open port running gRPC (Google Remote Procedure Call). Interaction with the server using allows for the…
Hack The Box - TwoMillion
June 13, 2023TwoMillion is a Linux machine hosting a web application with an API that has a command injection vulnerability. This vulnerability can be…
Hack The Box - Mirai
April 10, 2023Mirai features a Raspberry Pi device with default credentials that can be used to log in over SSH. Enumeration of the machine reveals a USB…
Hack The Box - Diogenes' Rage
March 27, 2023Diogenes' Rage is a web challenge featuring a vending machine application that enables users to purchase items using a coupon worth $1.0…