HackTheBox Walkthrough
Backend
Ubuntu 20.04.2 LTS Focal
Medium
API Explotation (FastAPI-Python), JWToken
Password in auth.log
Seal
Ubuntu 20.04.2 LTS Focal
Medium
Broken Parser Logic, Tomcat .war deploy RCE
Softlink, Ansible-Playbook, /bin/bash(SUID)
Cache
Ubuntu 18.04.2 LTS Bionic
Medium
Authentication Bypass, SQLI, RCE
Memcache (port 11211), Docker Abuse (/mnt)
GoodGames
Debian 11 (bullseye)
Easy
SQL Injection + Server Side Temp. Inj. + RCE
Docker Breakouts (Docker)
Validation
Ubuntu1 20.04 Focal
Easy
SQL Injection + PHP Command Injection RCE
Root password in archive config.php (Docker)
Sau
Ubuntu 20.04.6 LTS Focal
Easy
SSRF on Request-Baskets (CVE-2023-27163)
Sysytemctl misconfig. Broken less View
Wifinetic
Ubuntu 20.04.6 Focal krnwifinetic
Easy
FTP anonymus y Acceso por SHH
WPA Pin brute force attack with Reaver
Headless
Debian GNU/Linux 12 (bookworm)
Easy
XSS (http headers) , Command Injection
/bin/bash(SUID)
Perfection
Ubuntu 22.04.4 LTS Jammy
Easy
Server Side Temple Injection - WEBrick - Ruby
Hashcat Brute Force
Analytics
Ubuntu 22.04.3 LTS Jammy
Easy
Metabase 0.46.6 - CVE-2023-38646 (RCE)
Linux Kernel OverlayFS CVE-2023-2640 and CVE-2023-32629
Editorial
Ubuntu0.7 Jammy
Easy
Server-Side Request Forgery (SSRF)
Git enumeration, CVE-2022-24439 GitPython 3.1.29
Networked
CentOS 7
Easy
File upload bypass
Crontab, Command injection, /network-scripts/ in contOS
BoardLight
Ubuntu 0.11 Focal
Easy
Dolibarr - CVE-2023-30253
Enlightenment 0.23.1 CVE-2022-37706
TwoMillion
Ubuntu 22.04 LTS Jammy
Easy
API Enumeration, Command Injection
CVE-2023-0386, Linux Kernel OverlayFS setuid
