• 

  July 22, 2025

  Artificial Machine (HackTheBox) — Step-by-Step Walkthrough

  linuxhacktheboxeasytensorflowmalicious-modelprivilege-escalation

  Compromise of a Linux HackTheBox machine by uploading a malicious TensorFlow HDF5 model to exploit remote code execution, extracting and cracking MD5 credentials from a SQLite database, then escalating privileges by recovering a Bcrypt-hashed password from a Backrest backup archive and abusing the Backrest web UI to read the root flag.

  Read more →
• 

  July 17, 2025

  Dog Machine (HackTheBox) — Step-by-Step Walkthrough

  linuxhacktheboxeasygit-dumpercve-2022-42092file-uploadreverse-shellcredential-reusesudo-exploitationprivilege-escalation

  Compromise of a Linux HackTheBox machine by dumping an exposed Git repository to extract database credentials, logging into Backdrop CMS as admin, exploiting an authenticated unrestricted file upload vulnerability (CVE-2022-42092) for RCE, and escalating privileges via a sudo misconfiguration on the bee CLI tool.

  Read more →