• Search for:

    Category Archives: Easy Machine

    1. Home  - Challenges HackTheBox
    2. Archive by category "Easy Machine"
      3. ( Page2 )
    31 Jan, 2026
    Hack The Box: CodePartTwo Machine Walkthrough – Easy Diffculty
    Easy Machine , , , , , , , , , ,

    Just finished CodePartTwo on Hack The Box — a fun Easy-rated Linux box that taught me a lot!

    Initial access came via a js2py sandbox escape in their online JavaScript code editor (CVE-2024-28397 style prototype chain abuse) → reverse shell as ‘app’.
    Post-exploitation: found users.db in /app/instance → quick Python HTTP server exfil → local sqlite3 dump → two MD5 hashes. CrackStation instantly revealed marco’s password (sweetangelbabylove).
    Lateral move: SSH as marco → user.txt claimed.

    Privesc: sudo -l gave NOPASSWD /usr/local/bin/npbackup-cli. After inspecting npbackup.conf (stdin_from_command hint), I used –external-backend-binary to point to my malicious reverse shell script → root shell → root.txt captured.

    Loved how it combined modern sandbox escape with classic sudo misconfig abuse. Solid box for anyone practicing foothold → lateral → root paths.

    #HackTheBox #CTF #PenetrationTesting #Cybersecurity #PrivilegeEscalation #SandboxEscape #LinuxPrivilegeEscalation #RedTeamOps #BugBountyHunter #EthicalHacking …

    Learn MoreHack The Box: CodePartTwo Machine Walkthrough – Easy Diffculty

    6 Dec, 2025
    Hack The Box: Editor Machine Walkthrugh – Easy Difficulity
    Easy Machine , , , , , , , , ,

    User access was achieved by enumerating an XWiki instance running on port 8080, identifying its vulnerable version, and exploiting an unauthenticated RCE in the Solr component (CVE-2025-24893). The foothold exposed plaintext database credentials in the XWiki configuration file, which were reused for the system user, allowing a successful SSH login as oliver.

    Root access came from a misconfigured Netdata installation. Several root-owned plugins were SUID and group-writable, and oliver belonged to the netdata group. Replacing the ndsudo plugin with a custom SUID payload allowed Netdata to execute it as root, granting full system compromise and the root flag.

    #HackTheBox #CyberSecurity #PenetrationTesting #PrivilegeEscalation #EthicalHacking #RedTeam #CTF #XWiki #CVE2025 #Netdata #LinuxSecurity …

    Learn MoreHack The Box: Editor Machine Walkthrugh – Easy Difficulity

    15 Nov, 2025
    Hack The Box: Outbound Machine Walkthrough – Easy Difficulity
    Easy Machine , , , , , , , , ,

    Successfully completed the Outbound HTB machine. Initial access was gained by exploiting CVE‑2025‑49113 in Roundcube 1.6.10 using Tyler’s credentials, which allowed remote code execution.

    Investigation of Roundcube’s configuration revealed database credentials, enabling decryption of Jacob’s session data and retrieval of his plaintext password. Using this, SSH access was obtained to capture the user flag.

    Privilege escalation was achieved via CVE‑2025‑27591 by exploiting a world-writable /var/log/below directory, allowing command execution as root and retrieval of the root flag. This walkthrough highlights the importance of secure configuration, patching, and proper permission management.

    #HackTheBox #CyberSecurity #PenTesting #EthicalHacking #VulnerabilityExploitation #Roundcube #PrivilegeEscalation #LinuxSecurity #CVE2025 …

    Learn MoreHack The Box: Outbound Machine Walkthrough – Easy Difficulity

    25 Oct, 2025
    Hack The Box: Artificial Machine Walkthrough – Easy Diffucilty
    Easy Machine , , , , , , , , , ,

    Hacking the “Artificial” Machine on Hack The Box!

    Conquered the “Artificial” machine on Hack The Box! 🕵️‍♂️ I scanned the target, identified a web server on port 80, and created an account to access its dashboard, where I uploaded a malicious .h5 file to trigger a reverse shell. Using a Docker environment, I gained a shell as the app user, found a SQLite database (users.db), and cracked its password hashes to reveal credentials for user “gael,” allowing me to grab the user flag via SSH from user.txt. For root, I discovered port 9898 running Backrest, forwarded it, and enumerated backup files, finding a bcrypt-hashed password in config.json. Decoding a base64 value yielded a plaintext password, granting access to the Backrest dashboard, where I exploited the RESTIC_PASSWORD_COMMAND to trigger a root shell and secure the root flag from root.txt.

    #Cybersecurity #HackTheBox #CTF #PenetrationTesting #PrivilegeEscalation …

    Learn MoreHack The Box: Artificial Machine Walkthrough – Easy Diffucilty

    20 Sep, 2025
    Hack The Box: Fluffy Machine Walkthrough – Easy Difficulity
    Easy Machine , , , , , , , , , , , ,

    Introduction to Fluffy: In this write-up, we will explore the “Fluffy” machine from Hack The Box, categorised as an easy difficulty challenge. This walkthrough will cover the reconnaissance, exploitation, and privilege escalation steps required to capture the flag. Machine InformationIn

    Continue ReadingHack The Box: Fluffy Machine Walkthrough – Easy Difficulity

    13 Sep, 2025
    Hack The Box: Planning Machine Walkthrouh – Easy Diffucilty
    Easy Machine , , , , , , , , , , , , ,

    Introduction to Planning: In this write-up, we will explore the “Planning” machine from Hack The Box, categorised as an easy difficulty challenge. This walkthrough will cover the reconnaissance, exploitation, and privilege escalation steps required to capture the flag. Objective: The

    Continue ReadingHack The Box: Planning Machine Walkthrouh – Easy Diffucilty

    16 Aug, 2025
    Hack The Box: Nocturnal Machine Walkthrough – Easy Difficulty
    Easy Machine , , , , , , , , , , ,

    Captured the user flag by exploiting a file upload feature, unpacking .odt files to reveal a hidden password with xmllint, and injecting a reverse shell via the backup feature to get a www-data shell. Retrieved hashes from the nocturnal_database, cracked Tobias’s password (slowmotionapocalypse), and obtained the user flag. For the root flag, enumerated open ports, found port 8080 running ISPConfig, accessed it with admin credentials, identified the version, executed a public exploit, and gained root shell to capture the root flag.

    #HTB #HackTheBox #CyberSecurity #RedTeam #CTF #PenTesting #Nocturnal #LinuxExploitation #WebExploitation #PrivilegeEscalation …

    Learn MoreHack The Box: Nocturnal Machine Walkthrough – Easy Difficulty

    2 Aug, 2025
    Hack The Box: Code Machine Walkthrough – Easy Difficulity
    Easy Machine , , , , , , , , ,

    Successfully exploited a code execution vulnerability in a web application by bypassing keyword restrictions through Python class enumeration, leading to a reverse shell as the app-production user and retrieval of the user.txt flag. Leveraged access to a SQLite database to crack credentials for the martin user and escalate privileges. Identified a backup script running with root privileges, crafted a malicious JSON payload to include the root directory in backups, and ultimately obtained the root.txt flag.

    This engagement highlights the importance of secure input validation, credential management, and careful privilege delegation in application security.

    #Cybersecurity #HackTheBox #CTF #PenetrationTesting #PrivilegeEscalation #ApplicationSecurity …

    Learn MoreHack The Box: Code Machine Walkthrough – Easy Difficulity

    12 Jul, 2025
    Hack The Box: Dog Machine Walkthrough (Easy Difficulty)
    Easy Machine , , , , , , , , , , , ,

    Exploited exposed credentials in a .git repository to access Backdrop CMS, then used a remote command execution vulnerability (EDB-ID: 52021) for a reverse shell. Escalated to root by leveraging a misconfigured bee binary with sudo privileges, capturing both user and root flags.

    #Cybersecurity #HackTheBox #PenetrationTesting #CTF #WebExploitation #PrivilegeEscalation #EthicalHacking #InfoSec #CyberSec #Hacking …

    Learn MoreHack The Box: Dog Machine Walkthrough (Easy Difficulty)

    21 Jun, 2025
    Hack The Box: Titanic Machine Walkthrough – Easy Difficulty
    Easy Machine , , , , , , , , ,

    Just wrapped up a detailed walkthrough of the Hack The Box Titanic machine — an easy-rated challenge packed with valuable learning opportunities!

    The journey started with exploiting a directory traversal vulnerability to access sensitive Gitea configuration files and extract user credentials. From there, I gained SSH access as the developer user and retrieved the user flag.

    Privilege escalation was achieved by exploiting a critical ImageMagick vulnerability (CVE-2024-41817) in a writable directory, allowing arbitrary code execution via a crafted shared library. I also discovered the developer user had unrestricted sudo privileges, providing a straightforward path to root.

    #HackTheBox #CyberSecurity #Pentesting #CTF #PrivilegeEscalation #LinuxSecurity #ImageMagick #CVE202441817 #EthicalHacking #DirectoryTraversal

    …

    Learn MoreHack The Box: Titanic Machine Walkthrough – Easy Difficulty