Local File Inclusion Archives - Threatninja.net

12 Apr, 2025

Hack The Box: LinkVortex Machine Walkthrough Easy Difficulty

Easy Machine BurpSuite, Challenges, CVE-2023-40028, GhostCMS, GitDumper, HackTheBox, Linux, Local File Inclusion, Penetration Testing, ssh, SudoMisconfiguration

Successfully demonstrated advanced cybersecurity skills by exploiting a Ghost CMS vulnerability (CVE-2023-40028) to access sensitive credentials and secure the user flag. Identified and leveraged a sudo misconfiguration with the CHECK_CONTENT variable to escalate privileges and retrieve the root flag from /root/root.txt. Thrived in this hands-on challenge, sharpening penetration testing expertise! #HackTheBox #Cybersecurity #EthicalHacking #PenetrationTesting #CTF …

Learn MoreHack The Box: LinkVortex Machine Walkthrough Easy Difficulty

26 Aug, 2023

HackTheBox: OnlyforYou Machine Walkthrough – Medium Difficulty

Medium Machine BurpSuite, Challenges, chisel, gogs, HackTheBox, Linux, Local File Inclusion, Penetration Testing, pip3, port forwarding, Python, SQL Injection, ssh, this_is_fine_wuzzi

5 Aug, 2023

Hack The Box: Agile Machine Walkthrough – Medium Difficulty

Medium Machine BurpSuite, Challenges, HackTheBox, hydra, linpeas, Linux, Local File Inclusion, Penetration Testing, port forwarding, pspy64, ssh, sudoedit

3 Jun, 2023

Hack The Box: Bagel Machine Walkthrough – Medium Difficulty

Medium Machine BurpSuite, Challenges, DLL, dnspy, dotnet, HackTheBox, Linux, Local File Inclusion, Penetration Testing, Python, ssh, SSH key

17 Jul, 2022

HackTheBox: Redpanda Machine Walkthrough – Easy Difficulty

Easy Machine Challenges, command injection, curl, filter, HackTheBox, Java, Linux, Local File Inclusion, malicious jpg, Penetration Testing, springboot, SSH key, ssti, XML external entity attack

30 Jun, 2022

HackTheBox: Trick Machine Walkthrough – Easy Difficulty

Easy Machine bash, BurpSuite, Challenges, curl, Cybersecurity, dig, fail2ban, gobuster, HackTheBox, hydra, Linux, Local File Inclusion, Penetration Testing, smtp-enuemerate, sqlmap, SSH key

25 Jun, 2022

HackTheBox: Retired Machine Walkthrough – Medium Difficulty

Medium Machine binfmt_misc, binfmt_rootkit, BurpSuite, Challenges, curl, file read, ghidra, gobuster, HackTheBox, Linux, Local File Inclusion, Penetration Testing, Reverse Engineering, Security, ssh, SSH key, systemctl, wfuzz, wget

18 Dec, 2021

Hack The Box: Timing Walkthrough – Medium Difficulty

Medium Machine axel 2.16.1, base64, BurpSuite, Challenges, command injection, git, git tools, gobuster, HackTheBox, Linux, Local File Inclusion, netutils, Penetration Testing, php filter, Red Team, source code review, ssh, SSH key, upload

4 Dec, 2021

HackTheBox: Unicode Walkthrough – Medium Difficulty

Medium Machine Challenges, HackTheBox, json, jwks generator, jwt, Linux, Local File Inclusion, Penetration Testing, pyinstxtrator, ssh, SUID, treport, upload

23 Jul, 2021

HackTheBox: Pikaboo Machine Walkthrough – Hard Difficulty

Hard Machine Apache, Challenges, crontab, csv file, csvupdate cron, ftp, ftp log, HackTheBox, LDAP, ldapsearch, Linux, Local File Inclusion, Penetration Testing, python3, server status