HackTheBox

CCTV
CCTV
Created|HackTheBox|HackTheBox•Linux•SQL Injection•CVE-2024-51482•CVE-2025-60787•ZoneMinder•motionEye•Command Injection•Default Creds•Credential Cracking
HTB Easy Linux machine — default creds into ZoneMinder, time-based SQL injection (CVE-2024-51482) to dump password hashes, and root via motionEye command injection (CVE-2025-60787)
WingData
WingData
Created|HackTheBox|HackTheBox•Linux•RCE•CVE-2025-47812•CVE-2025-4517•Wing FTP•Null Byte Injection•Tarfile•Privilege Escalation•Password Cracking
HTB Easy Linux machine — Wing FTP RCE via Null Byte Injection (CVE-2025-47812), credential harvesting, and root via Python tarfile symlink bypass (CVE-2025-4517)
Dark Runes
Dark Runes
Created|HackTheBox|HackTheBox•Web•LFI•Brute Force•PDF Injection
HTB Web challenge — Admin registration, 4-digit brute force, and Local File Inclusion via PhantomJS PDF rendering
avatar
Youssef Kessentini
Security researcher & CTF player. Escalating privileges one machine at a time.
Articles
8
Tags
34
Categories
4
Announcement
🚩 New writeups every week! HTB machines, CTF challenges, and more.
Recent Posts
SOC Home Lab Project
SOC Home Lab Project
CSRF (Cross-Site Request Forgery)
CSRF (Cross-Site Request Forgery)
CCTV
CCTV
Path Traversal
Path Traversal
WingData
WingData
Categories
Tags
HackTheBoxLinuxSQL InjectionCVE-2024-51482CVE-2025-60787ZoneMindermotionEyeCommand InjectionDefault CredsCredential CrackingPortswiggerWeb SecurityCSRFWebLFIBrute ForcePDF InjectionPath TraversalSOCWazuhAzureOPNsenseMITRE ATT&CKHome LabRCECVE-2025-47812CVE-2025-4517Wing FTPNull Byte InjectionTarfilePrivilege EscalationPassword CrackingSQLiWelcome
Archives
Website Info
Article Count :
8
Unique Visitors :
Page Views :
Last Update :