https://b3ta-blocker.github.io/blog en-us root.b3ta.blocker@gmail.com (Hassaan Ali Bukhari) root.b3ta.blocker@gmail.com (Hassaan Ali Bukhari) Fri, 10 Jul 2026 00:00:00 GMT https://b3ta-blocker.github.io/blog/connected https://b3ta-blocker.github.io/blog/connected Connected is a Linux machine compromised via CVE-2025-57819, an unauthenticated SQL injection in FreePBX 16 Endpoint Manager, leveraged to plant a cron-triggered web shell for RCE as the asterisk user, followed by privilege escalation through a writable config file executed by a root-owned Incron trigger. Fri, 10 Jul 2026 00:00:00 GMT root.b3ta.blocker@gmail.com (Hassaan Ali Bukhari) hacktheboxlinuxeasyfreepbxsql-injectionrceprivilege-escalationincron