• Search for:

    Tag Archives: json

    1. Home  - 
    2. Posts tagged "json"
    28 Mar, 2026
    Hack The Box: Browsed Machine Walkthrough – Medium Diffucility
    Medium Machine , , , , , , ,

    Completed the Browsed machine on Hack The Box 🚀

    Gained initial access by uploading a malicious Chrome extension with a reverse shell payload. Automated testing executed it, giving a foothold as larry and access to user flag.

    Escalated privileges by abusing a misconfigured sudo rule on extension_tool.py. A world-writable pycache directory allowed bytecode poisoning, leading to root access and full compromise.

    Great box for practicing client-side attacks, extension abuse, and privilege escalation via Python internals.

    #HackTheBox #CyberSecurity #EthicalHacking #PenetrationTesting #RedTeam #PrivilegeEscalation #WebSecurity #CTF …

    Learn MoreHack The Box: Browsed Machine Walkthrough – Medium Diffucility

    21 Feb, 2026
    Hack The Box: GiveBack machine walkthrough – Medium Difficulity
    Medium Machine , , , , , , , , , ,

    Just completed the Giveback machine on Hack The Box (Medium difficulty).
    Started with Nmap → WordPress + vulnerable GiveWP 3.14.0 (CVE-2024-5932 / CVE-2024-8353 PHP Object Injection) → unauthenticated RCE via donation form PoC → reverse shell as bitnami in a Bitnami Kubernetes pod.
    Pivoted using mounted K8s service account token → abused the API + exploited a vulnerable legacy PHP-CGI intranet service → broke out to the host as user babywyrm → grabbed user.txt.

    For root: passwordless sudo on custom /opt/debug binary → used dumped secret as admin password → crafted malicious OCI config.json → ran privileged container via runc breakout → read root.txt.
    Great chain: web vuln → container escape → K8s lateral → sudo abuse.
    Loved the real-world Kubernetes misconfig + runc wrapper elements.

    #HackTheBox #CTF #PenetrationTesting #KubernetesSecurity #ContainerEscape #RCE #PrivilegeEscalation #Cybersecurity …

    Learn MoreHack The Box: GiveBack machine walkthrough – Medium Difficulity

    24 Jan, 2026
    Hack The Box: Imagery Machine Walkthrough – Medium Difficulity
    Medium Machine , , , , , , , , , , , , ,

    Just completed the Imagery machine on Hack The Box (Medium). The challenge involved identifying weaknesses in a custom web application, analysing exposed application logic and data, and chaining these issues to move laterally within the system to gain user-level access. Further investigation highlighted how overlooked privilege boundaries and misconfigured trusted utilities can be abused to escalate privileges and obtain full administrative control.

    #HackTheBox #CyberSecurity #WebSecurity #EthicalHacking #PenetrationTesting #PrivilegeEscalation #CTF #InfoSec
    …

    Learn MoreHack The Box: Imagery Machine Walkthrough – Medium Difficulity

    2 Aug, 2025
    Hack The Box: Code Machine Walkthrough – Easy Difficulity
    Easy Machine , , , , , , , , ,

    Successfully exploited a code execution vulnerability in a web application by bypassing keyword restrictions through Python class enumeration, leading to a reverse shell as the app-production user and retrieval of the user.txt flag. Leveraged access to a SQLite database to crack credentials for the martin user and escalate privileges. Identified a backup script running with root privileges, crafted a malicious JSON payload to include the root directory in backups, and ultimately obtained the root.txt flag.

    This engagement highlights the importance of secure input validation, credential management, and careful privilege delegation in application security.

    #Cybersecurity #HackTheBox #CTF #PenetrationTesting #PrivilegeEscalation #ApplicationSecurity …

    Learn MoreHack The Box: Code Machine Walkthrough – Easy Difficulity

    14 Sep, 2024
    Hack the Box: Intuition Machine Walkthrough – Hard Diffucility
    Hard Machine , , , , , , , , , , , ,

    Introduction to Intuition: In this write-up, we will explore the “Intuition” machine from Hack The Box, categorized as a Hard difficulty challenge. This walkthrough will cover the reconnaissance, exploitation, and privilege escalation steps required to capture the flag. Objective: The

    Continue ReadingHack the Box: Intuition Machine Walkthrough – Hard Diffucility

    11 Nov, 2023
    Hack The Box: Download Machine – Hard Difficulty
    Hard Machine , , , , , , , , , , ,

    In this post, I would like to share a walkthrough of the Download Machine from Hack the Box This room will be considered a Hard machine on Hack the Box What will you gain from the Download machine? For the user flag, you will need

    Continue ReadingHack The Box: Download Machine – Hard Difficulty

    10 Sep, 2023
    Hack The Box: Pikatwoo Machine Walkthrough – Insane Difficulty
    Insane Machine , , , , , , , , , , ,

    In this post, I would like to share a walkthrough of the Pikatwoo Machine from Hack the Box. This room will be considered an Insane machine on Hack the Box What will you gain from the Pikatwoo machine? For the user

    Continue ReadingHack The Box: Pikatwoo Machine Walkthrough – Insane Difficulty

    24 Jun, 2023
    Hack The Box: Stocker Machine Walkthrough – Easy Difficulty
    Easy Machine , , , , , , , , ,

    In this post, I would like to share a walkthrough of the Stocker Machine from Hack the Box This room will be considered an Easy machine on Hack the Box What will you gain from the Stocker machine? For the user

    Continue ReadingHack The Box: Stocker Machine Walkthrough – Easy Difficulty

    8 Jun, 2023
    Hack The Box: TwoMillion Machine Walkthrough -Easy Difficulty
    Easy Machine , , , , , , , , , , , ,

    In this post, I would like to share a walkthrough of the TwoMillion Machine from Hack the Box. A machine that is a special edition from Hack The Box in order they celebrate the 2,000,000 HackTheBox members This room will be

    Continue ReadingHack The Box: TwoMillion Machine Walkthrough -Easy Difficulty