2025-12-12 7 min
[writeup]
Hack The Box Postman Writeup (Easy Linux)
Easy Linux box. An unauthenticated Redis 4.0.9 writes an SSH key, a cracked id_rsa.bak backup gives Matt, and Webmin 1.910 RCE runs as root.
tail -f /var/log/hos
retired boxes, exploit notes, tooling we wrote because nothing else did the job.
324
posts
11
authors
weekly
cadence
grep all HackTheBox OSCP Preparation Privilege Escalation Linux Web Windows RCE Easy Active Directory Information Disclosure SSH Medium
> latest
2025-12-12 10 min
[writeup]
Hack The Box Blunder Writeup (Easy Linux)
Easy Linux box. CVE-2019-17240 defeats Bludit's login rate limit, an image upload flaw gives a shell, and sudo -u#-1 turns a !root rule into a root shell.
2025-12-12 9 min
[writeup]
Hack The Box TraceBack Writeup (Easy Linux)
Easy Linux box. A leftover smevk.php webshell with default creds gives webadmin, luvit sudo runs a Lua shell as sysadmin, and a writable MOTD script gives root.
2025-12-11 10 min
[writeup]
Hack The Box Traverxec Writeup (Easy Linux)
Easy Linux box. CVE-2019-16278 in nostromo 1.9.6 gives RCE, a public_www backup leaks david's SSH key, and sudo journalctl escapes to root via its pager.
2025-12-10 8 min
[writeup]
Hack The Box Buff Writeup (Easy Windows)
Easy Windows box. Gym Management 1.0 gives unauthenticated RCE as shaun, and a CloudMe 1.11.2 buffer overflow reached over chisel gives administrator.