Python Archives - Threatninja.net

28 Mar, 2026

Hack The Box: Browsed Machine Walkthrough – Medium Diffucility

Medium Machine Challenges, extension_tool.py, Gitea, HackTheBox, json, Linux, Penetration Testing, Python

Completed the Browsed machine on Hack The Box 🚀

Gained initial access by uploading a malicious Chrome extension with a reverse shell payload. Automated testing executed it, giving a foothold as larry and access to user flag.

Escalated privileges by abusing a misconfigured sudo rule on extension_tool.py. A world-writable pycache directory allowed bytecode poisoning, leading to root access and full compromise.

Great box for practicing client-side attacks, extension abuse, and privilege escalation via Python internals.

#HackTheBox #CyberSecurity #EthicalHacking #PenetrationTesting #RedTeam #PrivilegeEscalation #WebSecurity #CTF …

Learn MoreHack The Box: Browsed Machine Walkthrough – Medium Diffucility

13 Sep, 2025

Hack The Box: Planning Machine Walkthrouh – Easy Diffucilty

Easy Machine BurpSuite, Challenges, cronjob-uI, CVE-2024-9264, docker escape, DuckDB CLI, gobuster, grafana, HackTheBox, Linux, port-forwading, Python, ssh, unsanitized SQL

13 Feb, 2024

Hack The Box: Builder Machine Walkthrough – Medium Difficulty

Medium Machine bash file, Challenges, command injection, CVE-2024-23897, HackTheBox, hashcat, jenkins, john the ripper, Linux, Penetration Testing, Python, ssh

21 Jan, 2024

Hack The Box: Bookworm Machine Walkthrough – Insane Difficulty

Insane Machine Challenges, HackTheBox, Linux, metasploit, Penetration Testing, Python, ssh, SSH key, XSS

14 Nov, 2023

Hack The Box: Broker Machine Walkthrough – Easy Difficulty

Easy Machine Apache ActiveMQ, Challenges, CVE-2023-46604, HackTheBox, Linux, nginx, Python, ssh

2 Sep, 2023

Hack the Box: MonitorsTwo Machine Walkthrough – Easy Difficulty

Easy Machine Challenges, docker, findmnt, HackTheBox, hashcat, linpeas, Linux, metasploit, MySQL, Penetration Testing, Python, ssh

26 Aug, 2023

HackTheBox: OnlyforYou Machine Walkthrough – Medium Difficulty

Medium Machine BurpSuite, Challenges, chisel, gogs, HackTheBox, Linux, Local File Inclusion, Penetration Testing, pip3, port forwarding, Python, SQL Injection, ssh, this_is_fine_wuzzi

12 Aug, 2023

Hack The Box: Busqueda Machine Walkthrough – Easy Difficulty

Easy Machine bash, BurpSuite, Challenges, docker, git, Gitea, HackTheBox, Linux, Penetration Testing, port forwarding, Python, ssh

3 Jun, 2023

Hack The Box: Bagel Machine Walkthrough – Medium Difficulty

Medium Machine BurpSuite, Challenges, DLL, dnspy, dotnet, HackTheBox, Linux, Local File Inclusion, Penetration Testing, Python, ssh, SSH key

27 May, 2023

Hack The Box: Absolute Machine Walkthrough – Insane Difficulty

Insane Machine Bloodhound, Challenges, crackmapexec, dacledit, Domain-Sharing, evil-winrm, exiftool, HackTheBox, impacket, john the ripper, kerbrute, LDAP, ldapsearch, owneredit, Penetration Testing, Python, pywhisker, smbclient, Windows