Posts : #htb

HackTheBox – Busqueda Writeup / Walkthrough

External Information Gathering Ports and Service Initial Access when we access http://10.10.11.208 will directing to http://searcher.htb, so we need to configure our /etc/hosts file in the footer section we will know the application using Flask and Searchor 2.4.0 which is vulnerable to this exploit https://github.com/nikn0laty/Exploit-for-Searchor-2.4.0-Arbitrary-CMD-Injection Privilege Escalation this machine running web service in port `3000` […]

Capture The Flag    16 May 2024

HackTheBox – Analytics

Analytics Initial access this machine have subdomain data.analytical.htb and using a Metabase version 0.46.x which vulnerable to CVE-2023-38646 attackhttps://secry.me/explore/news/metabase-rce-cve-2023-38646/ Using metasploit we can import this exploit/metabase_setup_token_rce.rb to metasploit and getting reverse shell Using python script https://github.com/robotmikhro/CVE-2023-38646 Escaping the docker in the environment we can see information about credential notice the META_USER and META_PASS we can […]

Capture The Flag    13 Feb 2024

Search

Categories

Tags

#cve #htb #idor #linux #oscp #privesc #pwkv3 #takeover #theory #websecurity