Category: HTB Season 10

  • facts.htb HackTheBox machine - CMS exploit to root via facter RCE

    Facts HTB Writeup

    Command: nmap -Pn -sS -A 10.129.88.88 Command: echo 10.129.88.88 facts.htb >> /etc/hosts Command: ffuf -u http://facts.htb/FUZZ -w /usr/share/wordlists/dirbuster/directory-list-2.3-medium.txt -k -fc…

  • Devarea pwned

    DevArea HTB Writeup

    Introduction DevArea presents a realistic development environment with multiple privesc vectors exploiting misconfigured services and world-writable system binaries. From anonymous FTP to Apache CXF XXE and Hoverfly middleware injection, this box tests reconnaissance, service…

  • Kobold HTB Writeup

    Kobold HTB Writeup

    Introduction Kobold is an Easy-rated Linux machine from HackTheBox Season 10 that showcases a realistic privilege escalation vector through Docker group misconfiguration and PAM session…


  • VariaType HTB writeup

    Command: nmap -sV -Pn IP Command: echo ” IP variatype.htb” >> /etc/hosts Command: ffuf -u http://variatype.htb/ -H “Host: FUZZ.variatype.htb” -w…


  • Interpreter HTB Writeup

    Introduction The Interpreter box is designed to test a mix of web exploitation, cryptography awareness, Python code analysis, and privilege…


  • Pterodactyl HTB Writeup

    Command: nmap -A -Pn -sC 10.10.X.X -o nmapresult Command: echo ‘10.10.10.10 Pterodactyl.htb play.Pterodactyl.htb nothing special, started doing ffuf, below is…