37 matches found
ExploitScript-CVE-2023-46604
ExploitScript-CVE-2023-46604 Disclaimer This repository contains proof-of-concept code for CVE-2023-466064 and is intended strictly for educational purposes. The authors and contributors do not endorse any illegal activity. The information presented here is for academic, security research, and...
htb-wifinetictwo-exploit
CVE-2021-31630 Exploit PoC This Python script is a Proof of Concept PoC exploit for CVE-2021-31630, targeting a vulnerability in OpenPLC running on the WifineticTwo box at HackTheBox. It is designed for educational purposes only, aiming to demonstrate the exploitation process in a controlled...
CVE-2023-43364-Exploit-CVE
CVE-2023-43364-エクスプロイト-CVE これは、Searchor 2.4.0 を悪用する Python スクリプトです - eval 関数が安全でない方法で実装されており、RCE のために悪用される可能性があります。 このマシンは busybox がインストールされていることを前提としています。これは HackTheBox の Busqueda マシン向けに作成したためです。busybox 以外を使用する必要がある場合は、ペイロードを別のリバースシェルに置き換えてください。...
Variatype.htb-CVE-2025-66034
Hackthebox Season 10 - Variatype Este script te dará acceso inicial. Primero, instala los módulos requeridos usando pip pip3 install -r requirements.txt Uso python3 exploit.py 'id' o python3 exploit.py 'echo BASE64ENCODEDREVSHELL | base64 -d | bash'...
Interpreter-HackTheBox
Interpreter — HackTheBox Plataforma: HackTheBox SO: Linux Estado: Retirado — walkthrough completo publicado. Walkthrough completo: l3dsec.com/walkthroughs/interpreter-htb Cadena de ataque root@kitploit: Nmap → Mirth Connect 4.4.0 80/443 → CVE-2023-43208 RCE por deserialización de Java sin...
cctv
CCTV — HackTheBox 演练 平台： HackTheBox | 操作系统： Linux 攻击链 通过 CVE-2024-51482 对 ZoneMinder 进行 SQL 注入，从数据库中导出 bcrypt 哈希。使用 hashcat 破解后获得 SSH 访问权限。通过端口转发暴露的内部 motionEye 实例存在 CVE-2025-60787 漏洞——可获取 root shell。 枚举 root@kitploit: nmap -sV -sC 10.129.53.160 -Pn 22/tcp open ssh OpenSSH 9.6p1 Ubuntu 80/tcp ope...
onetwoseven-writeup
HTB OneTwoSeven — 完整通关攻略 针对已退役的 HackTheBox Linux 机器 OneTwoSeven 的完整端到端通关攻略。完整链路：确定性凭据生成 → SFTP chroot 符号链接逃逸 → vim 交换文件恢复 → SSH 端口转发至受防火墙保护的管理面板 → 绕过被注释掉的 Apache 重写规则 → RCE → 利用 CVE-2024-1086 （nftables UAF）获取 root。 核心亮点： “已禁用”的插件上传并未真正禁用——插件管理器的 switch 匹配的是 REQUESTURI，因此可以借助 处于活动状态...
CVE-2024-51482-ZoneMinder-CCTV-HTB-Reliable-EXP
README Hackthebox Machine: CCTV Application: ZoneMinder Description Performing multiple time-based blind injections for the same character and selecting the most frequent result significantly reduces errors and improves reliability, though it is time-consuming...
CVE-2014-0160-HeartBleed
This is the exploit for CVE-2014-0160 from exploitdb. It did not work for me on python3 while solving Valentine on hackthebox, so I have made the necessary changes. I am not the original author of this code...
TwoMillion-Machine-Writeup
About Machine TwoMillion is an Easy difficulty Linux box that was released to celebrate reaching 2 million users on HackTheBox. The box features an old version of the HackTheBox platform that includes the old hackable invite code. After hacking the invite code an account can be created on the...
celerystalk
celerystalk celerystalk helps you automate your network scanning/enumeration process with asynchronous jobs aka tasks while retaining full control of which tools you want to run. Interactive Demo: Bug Bounty Mode HackerOne Interactive Demo: Vulnerability Assessment / PenTest Mode Retired...
HTB-TwoMillion-Writeup
HTB-TwoMillion-Writeup HackTheBox TwoMillion machine writeup — API abuse, command injection & CVE-2023-0386 HackTheBox — TwoMillion Writeup HackTheBox — TwoMillion Writeup Machine Info Field| Details ---|--- Name| TwoMillion Difficulty| Easy OS| Linux IP| 10.10.11.221 CVE| CVE-2023-0386 Summary...
htb-facts
HTB — Facts Easy/Linux - Season 10 Summary Facts is an Easy Linux machine that requires exploiting a known vulnerability CVE-2025-2304 in Camaleon CMS to extract local AWS S3 credentials. Enumerating the internal S3 buckets reveals an SSH private key that must be cracked using John the Ripper to...
HackTheBox-Facts
HTB Facts — Full Writeup Difficulty: Medium OS: Linux Tags: Web, MinIO, Camaleon CMS, Path Traversal, SSTI, Privilege Escalation Table of Contents 1. Reconnaissance 2. Web Enumeration — Port 80 3. MinIO Discovery — Port 54321 4. Camaleon CMS — Admin Access 5. Privilege Escalation to Admin Role 6...
htb-ctf-walkthroughs
HTB CTF Walkthroughs Documented solutions for HackTheBox machines. Each walkthrough covers enumeration → exploitation → privilege escalation with commands, screenshots, and technical analysis. Structure root@kitploit: htb-ctf-/ ├── index.md Full walkthrough └── media/ Screenshots and supporting...
HackTheBox
HackTheBox — Writeups, Tooling & Exploitation Pipelines A wor...
HTB-Machines-writeups
somdv3 — HTB Writeups Personal HackTheBox writeup repository...
Exploit for Improper Ownership Management in Debian Debian_Linux
HTB-TwoMillion-Writeup HackTheBox TwoMillion machine writeup —...