Tag: Linux | Youssef Kessentini — Reverse Koat Shell

Created2026-07-11|HackTheBox|HackTheBox•Linux•SQL Injection•CVE-2024-51482•CVE-2025-60787•ZoneMinder•motionEye•Command Injection•Default Creds•Credential Cracking

HTB Easy Linux machine — default creds into ZoneMinder, time-based SQL injection (CVE-2024-51482) to dump password hashes, and root via motionEye command injection (CVE-2025-60787)

WingData

Created2026-06-25|HackTheBox|HackTheBox•Linux•RCE•CVE-2025-47812•CVE-2025-4517•Wing FTP•Null Byte Injection•Tarfile•Privilege Escalation•Password Cracking

HTB Easy Linux machine — Wing FTP RCE via Null Byte Injection (CVE-2025-47812), credential harvesting, and root via Python tarfile symlink bypass (CVE-2025-4517)