ssti Archives - Threatninja.net

31 Jan, 2026

Hack The Box: CodePartTwo Machine Walkthrough – Easy Diffculty

Easy Machine Challenges, CVE-2024-28397, HackTheBox, js2py, Linux, npbackup-cli, python3, Sandbox bypass, sqlite3, ssh, ssti

Just finished CodePartTwo on Hack The Box — a fun Easy-rated Linux box that taught me a lot!

Initial access came via a js2py sandbox escape in their online JavaScript code editor (CVE-2024-28397 style prototype chain abuse) → reverse shell as ‘app’.
Post-exploitation: found users.db in /app/instance → quick Python HTTP server exfil → local sqlite3 dump → two MD5 hashes. CrackStation instantly revealed marco’s password (sweetangelbabylove).
Lateral move: SSH as marco → user.txt claimed.

Privesc: sudo -l gave NOPASSWD /usr/local/bin/npbackup-cli. After inspecting npbackup.conf (stdin_from_command hint), I used –external-backend-binary to point to my malicious reverse shell script → root shell → root.txt captured.

Loved how it combined modern sandbox escape with classic sudo misconfig abuse. Solid box for anyone practicing foothold → lateral → root paths.

#HackTheBox #CTF #PenetrationTesting #Cybersecurity #PrivilegeEscalation #SandboxEscape #LinuxPrivilegeEscalation #RedTeamOps #BugBountyHunter #EthicalHacking …

Learn MoreHack The Box: CodePartTwo Machine Walkthrough – Easy Diffculty

1 Feb, 2025

Hack The Box: Trickster Machine Walkthrough – Medium Difficulty

Medium Machine .br extension, brotli, BurpSuite, Challenges, Changedetection.io, CVE-2024-32651, CVE-2024-34716, docker escape, ffuf, git, git-dumper, gobuster, HackTheBox, hashcat, Linux, MySQL, Penetration Testing, PHP, port forwarding, PrestraShop CMS, PrusaSlicer, ssh, ssti

18 Nov, 2023

Hack The Box: Sandworm Machine Walkthrough – Medium

Medium Machine Challenges, command injection, firejail, gpg-key, HackTheBox, linpeas, Linux, Penetration Testing, ssh, ssti, tipnet

17 Jul, 2022

HackTheBox: Redpanda Machine Walkthrough – Easy Difficulty

Easy Machine Challenges, command injection, curl, filter, HackTheBox, Java, Linux, Local File Inclusion, malicious jpg, Penetration Testing, springboot, SSH key, ssti, XML external entity attack

10 May, 2022

Hack The Box: Late Machine Walkthrough – Easy Difficulty

Easy Machine Challenges, flask, HackTheBox, jinja2, linpeas, Penetration Testing, pwncat-cs, ssh, ssti, Vulnerabilities

18 Apr, 2022

HackTheBox: Talkative Machine Walkthrough – Hard Difficulty

Hard Machine base64, boltcms, Challenges, chisel, curl, docker, gcc, gobuster, HackTheBox, jamovi, jamovi R language, javascript, json, mongodb, mongosh, Penetration Testing, port forwarding, pwncat-cs, rocketchat, shocker exploit, ssh, ssti, webhook

13 Mar, 2022

Hack The Box: GoodGames Machine Walkthrough – Easy Difficulty

Easy Machine BurpSuite, bypassing sqli, Challenges, docker, docker mount, escape docker, HackTheBox, Linux, Penetration Testing, sqli, sqli-union, ssti

3 Oct, 2021

HackTheBox: Bolt Walkthrough – Medium Difficulty

Medium Machine Challenges, docker, gobuster, HackTheBox, HackTricks, invite code, john the ripper, Linux, MySQL, OpenPGP, Penetration Testing, php file, pyc file, Python, Roundcube, sqlite3, ssti

1 Jun, 2021

Hackthebox: Spider Machine Walkthrough – Hard Difficulty

Hard Machine BurpSuite, Challenges, flask, flask-unsign, gobuster, HackTheBox, Linux, Penetration Testing, port forwarding, source code review, sqlmap, ssh, SSH key, ssti