path traversal Archives • Vulndev

04JulJuly 4, 2020

ForwardSlash @ HackTheBox

ForwardSlash is a 40-point Linux Machine on HackTheBox. We use a path traversal vulnerability to get ssh credentials and abuse a custom backup program to read an old configuration file. For root we mount a custom LUKS image that contains a setuid program.

By xctCTFhackthebox, linux, luks, path traversal

Patents @ HackTheBox

Patents is a 40-point Linux machine on HackTheBox. For user we exploit an external entity injection in a word document and a local file inclusion that involves path traversal and calculating the name of an uploaded file. For root we use return oriented programming to exploit a stack overflow in...

By xctCTFbinary exploitation, hackthebox, lfi, linux, path traversal, rop, word, xxe

Tag - path traversal