35 matches found
CVE-2023-43364-Exploit-CVE
CVE-2023-43364-Exploit-CVE Este es un script de Python para explotar Searchor 2.4.0: la función eval fue implementada de forma insegura y puede ser explotada para RCE. Esta máquina depende de que busybox esté instalado, ya que escribí esto para la máquina Busqueda de HackTheBox. Simplemente...
htb-wifinetictwo-exploit
CVE-2021-31630 Exploit PoC This Python script is a Proof of Concept PoC exploit for CVE-2021-31630, targeting a vulnerability in OpenPLC running on the WifineticTwo box at HackTheBox. It is designed for educational purposes only, aiming to demonstrate the exploitation process in a controlled...
TwoMillion-Machine-Writeup
Acerca de la máquina TwoMillion es una máquina Linux de dificultad Easy que fue lanzada para celebrar la llegada de 2 millones de usuarios en HackTheBox. La máquina incluye una versión antigua de la plataforma HackTheBox que contiene el antiguo código de invitación pirateable. Después de hackear ...
HackTheBox-Facts
HTB Facts — Full Writeup Difficulty: Medium OS: Linux Tags: Web, MinIO, Camaleon CMS, Path Traversal, SSTI, Privilege Escalation Table of Contents 1. Reconnaissance 2. Web Enumeration — Port 80 3. MinIO Discovery — Port 54321 4. Camaleon CMS — Admin Access 5. Privilege Escalation to Admin Role 6...
Variatype.htb-CVE-2025-66034
Hackthebox Season 10 - Variatype Questo script ti permetterà di ottenere l'accesso iniziale. Per prima cosa, installa i moduli richiesti usando pip pip3 install -r requirements.txt Utilizzo python3 exploit.py 'id' oppure python3 exploit.py 'echo BASE64ENCODEDREVSHELL | base64 -d | bash'...
onetwoseven-writeup
HTB OneTwoSeven — संपूर्ण वॉकथ्रू OneTwoSeven — एक सेवानिवृत्त HackTheBox Linux मशीन — का संपूर्ण, अंत-से-अंत वॉकथ्रू। पूरी श्रृंखला: नियतात्मक क्रेडेंशियल जनरेशन → SFTP chroot से symlink पलायन → vim स्वैप फ़ाइल पुनर्प्राप्ति → फ़ायरवॉल-सुरक्षित एडमिन पैनल तक SSH पोर्ट-फ़ॉरवर्डिंग → टिप्पणी-किए ग...
CVE-2024-51482-ZoneMinder-CCTV-HTB-Reliable-EXP
README Macchina Hackthebox: CCTV Applicazione: ZoneMinder Descrizione Eseguire più iniezioni blind basate sul tempo per lo stesso carattere e selezionare il risultato più frequente riduce significativamente gli errori e migliora l'affidabilità, sebbene sia dispendioso in termini di tempo...
CVE-2014-0160-HeartBleed
Este é o exploit para o CVE-2014-0160 do exploitdb. Ele não funcionou para mim no python3 enquanto resolvia a máquina Valentine no hackthebox, então fiz as alterações necessárias. Não sou o autor original deste código...
celerystalk
celerystalk celerystalk helps you automate your network scanning/enumeration process with asynchronous jobs aka tasks while retaining full control of which tools you want to run. Interactive Demo: Bug Bounty Mode HackerOne Interactive Demo: Vulnerability Assessment / PenTest Mode Retired...
HTB-TwoMillion-Writeup
HTB-TwoMillion-Writeup HackTheBox TwoMillion Maschinen-Writeup — API-Missbrauch, Befehlsinjektion & CVE-2023-0386 HackTheBox — TwoMillion Writeup HackTheBox — TwoMillion Writeup Maschineninfo Feld| Details ---|--- Name| TwoMillion Schwierigkeit| Easy OS| Linux IP| 10.10.11.221 CVE| CVE-2023-0386...
htb-facts
HTB — Facts Easy/Linux - Stagione 10 Riepilogo Facts è una macchina Linux di livello facile che richiede lo sfruttamento di una vulnerabilità nota CVE-2025-2304 in Camaleon CMS per estrarre le credenziali locali di AWS S3. L'enumerazione dei bucket S3 interni rivela una chiave privata SSH che dev...
ExploitScript-CVE-2023-46604
ExploitScript-CVE-2023-46604 Disclaimer Questo repository contiene codice proof-of-concept per CVE-2023-466064 ed è destinato esclusivamente a scopo educativo. Gli autori e i collaboratori non approvano alcuna attività illegale. Le informazioni qui presentate sono a scopo accademico, di ricerca...
htb-ctf-walkthroughs
HTB CTF Lösungswege Dokumentierte Lösungen für HackTheBox-Maschinen. Jeder Walkthrough deckt Enumeration → Ausnutzung → Privilegieneskalation mit Befehlen, Screenshots und technischer Analyse ab. Struktur root@kitploit: htb-ctf-/ ├── index.md Vollständiger Walkthrough └── media/ Screenshots und...
HackTheBox
HackTheBox — Writeups, Tooling & Exploitation Pipelines A wor...
HTB-Machines-writeups
somdv3 — HTB Writeups Personal HackTheBox writeup repository...
Exploit for Improper Ownership Management in Debian Debian_Linux
HTB-TwoMillion-Writeup HackTheBox TwoMillion machine writeup —...
ofensive-playbook
HackTheBox — Writeups Collection A collection of HackTheBox m...
Exploit for Improper Restriction of XML External Entity Reference in Cisco Secure_Endpoint
--- tags: hackthebox, linux, hard, cve-2023-23946, cve-2023-200...