38 matches found
CVE-2023-43364-Exploit-CVE
CVE-2023-43364-Exploit-CVE This is a python script to exploit Searchor 2.4.0 - the eval function was implemented insecurely and can be exploited for RCE. This machine relies on busybox being installed, as I wrote this for the Busqueda machine on HackTheBox. Just replace the payload with another...
htb-wifinetictwo-exploit
CVE-2021-31630 Exploit PoC This Python script is a Proof of Concept PoC exploit for CVE-2021-31630, targeting a vulnerability in OpenPLC running on the WifineticTwo box at HackTheBox. It is designed for educational purposes only, aiming to demonstrate the exploitation process in a controlled...
writeups
Writeups & Pentest Notes Personal knowledge base documenting...
Variatype.htb-CVE-2025-66034
Hackthebox Season 10 - Variatype This script will get you initial access. First, Install required modules using pip pip3 install -r requirements.txt Usage python3 exploit.py 'id' or python3 exploit.py 'echo BASE64ENCODEDREVSHELL | base64 -d | bash'...
cctv
CCTV — HackTheBox Walkthrough 플랫폼: HackTheBox | OS: Linux 공격 체인 CVE-2024-51482를 통한 ZoneMinder SQL 인젝션으로 데이터베이스에서 bcrypt 해시를 덤프한다. hashcat으로 크래킹하면 SSH 접근 권한을 얻는다. 포트 포워딩으로 노출된 내부 motionEye 인스턴스는 CVE-2025-60787에 취약하다 — 루트 셸을 제공한다. 열거 root@kitploit: nmap -sV -sC 10.129.53.160 -Pn 22/tcp open ssh...
onetwoseven-writeup
HTB OneTwoSeven — Полное прохождение Полное сквозное прохождение OneTwoSeven — вышедшей из ротации HackTheBox Linux-машины. Полная цепочка: детерминированная генерация учётных данных → выход из SFTP-chroot через симлинки → восстановление swap-файла vim → проброс SSH-портов к экранированной...
CVE-2024-51482-ZoneMinder-CCTV-HTB-Reliable-EXP
README Hackthebox Machine: CCTV Application: ZoneMinder Description Performing multiple time-based blind injections for the same character and selecting the most frequent result significantly reduces errors and improves reliability, though it is time-consuming...
Interpreter-HackTheBox
Interpreter — HackTheBox 플랫폼: HackTheBox OS: Linux 상태: Retired — 전체 풀이 공개됨. 전체 풀이: l3dsec.com/walkthroughs/interpreter-htb 공격 체인 root@kitploit: Nmap → Mirth Connect 4.4.0 80/443 → CVE-2023-43208 인증 없는 Java 역직렬화 RCE → mirth로 셸 획득 → mirth.properties → MySQL 자격 증명 → MySQL → sedric PBKDF2 해시 → hashca...
CVE-2014-0160-HeartBleed
This is the exploit for CVE-2014-0160 from exploitdb. It did not work for me on python3 while solving Valentine on hackthebox, so I have made the necessary changes. I am not the original author of this code...
TwoMillion-Machine-Writeup
О машине TwoMillion — это лёгкая Linux-машина уровня Easy, выпущенная в честь достижения 2 миллионов пользователей на HackTheBox. Машина содержит старую версию платформы HackTheBox со старым взламываемым инвайт-кодом. После взлома инвайт-кода можно создать учётную запись на платформе. Эта учётная...
celerystalk
celerystalk celerystalk helps you automate your network scanning/enumeration process with asynchronous jobs aka tasks while retaining full control of which tools you want to run. Interactive Demo: Bug Bounty Mode HackerOne Interactive Demo: Vulnerability Assessment / PenTest Mode Retired...
HTB-TwoMillion-Writeup
HTB-TwoMillion-Writeup HackTheBox TwoMillion machine writeup — API abuse, command injection & CVE-2023-0386 HackTheBox — TwoMillion Writeup HackTheBox — TwoMillion Writeup Machine Info Field| Details ---|--- Name| TwoMillion Difficulty| Easy OS| Linux IP| 10.10.11.221 CVE| CVE-2023-0386 Summary...
htb-facts
HTB — Facts Easy/Linux - Season 10 Summary Facts is an Easy Linux machine that requires exploiting a known vulnerability CVE-2025-2304 in Camaleon CMS to extract local AWS S3 credentials. Enumerating the internal S3 buckets reveals an SSH private key that must be cracked using John the Ripper to...
HackTheBox-Facts
HTB Facts — Full Writeup Difficulty: Medium OS: Linux Tags: Web, MinIO, Camaleon CMS, Path Traversal, SSTI, Privilege Escalation Table of Contents 1. Reconnaissance 2. Web Enumeration — Port 80 3. MinIO Discovery — Port 54321 4. Camaleon CMS — Admin Access 5. Privilege Escalation to Admin Role 6...
htb-ctf-walkthroughs
HTB CTF Walkthroughs Documented solutions for HackTheBox machines. Each walkthrough covers enumeration → exploitation → privilege escalation with commands, screenshots, and technical analysis. Structure root@kitploit: htb-ctf-/ ├── index.md Full walkthrough └── media/ Screenshots and supporting...
ExploitScript-CVE-2023-46604
ExploitScript-CVE-2023-46604 Disclaimer This repository contains proof-of-concept code for CVE-2023-466064 and is intended strictly for educational purposes. The authors and contributors do not endorse any illegal activity. The information presented here is for academic, security research, and...
HackTheBox
HackTheBox — Writeups, Tooling & Exploitation Pipelines A wor...
HTB-Machines-writeups
somdv3 — HTB Writeups Personal HackTheBox writeup repository...