webPromedium

Dark Runes

HackTheBox

"Survivors find a battered laptop in the rubble. Powering it up, they discover a cryptic software interface from an ancient architecture firm, hinting at vital blueprints. They must crack its security protocols. Undeterred, they race against time."

$ ls tags/ techniques/

ssrf lfi nodejs express access-control brute-force phantomjs markdown-pdf admin-registration file-protocol pdf-generation cookie-auth

admin_registration_bypassaccess_code_brute_forcephantomjs_file_readssrf_via_pdf_generationiframe_file_protocol

Analysis

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat.

$ python3 exploit.py --target 192.168.1.1 --port 8080
[*] Connecting to target...
[+] Shell obtained!

Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.

🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

$sign in

$ grep --similar

Similar writeups

[web][Pro]Desires— HackTheBox
[web][Pro]Blueprint Heist— hackthebox
[misc][Pro]Prison Pipeline— HackTheBox Business CTF 2024
[web][Pro]board_of_secrets— miptctf
[web][free]Prison Pipeline— hackthebox_business_ctf_2024