https://b3ta-blocker.github.io/blog en-us root.b3ta.blocker@gmail.com (Hassaan Ali Bukhari) root.b3ta.blocker@gmail.com (Hassaan Ali Bukhari) Fri, 14 Aug 2026 00:00:00 GMT https://b3ta-blocker.github.io/blog/orion https://b3ta-blocker.github.io/blog/orion Orion is a Linux machine compromised via a Craft CMS 5.6.16 RCE exploit for initial access as www-data, followed by credential extraction from a leaked .env file, database enumeration for a crackable admin hash, and privilege escalation to root through CVE-2026-24061, an authentication bypass in telnetd via a spoofed USER environment variable. Fri, 14 Aug 2026 00:00:00 GMT root.b3ta.blocker@gmail.com (Hassaan Ali Bukhari) hacktheboxlinuxMachinevery-easycraftcmsrcesql-databasetelnet