Hack The Box – CronOS Walkthrough
Introduction
This was an intermediate Linux machine that involved exploiting an SQL injection vulnerability to gain access to a traceroute page affected by a remote command vulnerability in order to obtain a reverse shell, and exploiting a PHP function used in a cron hob to gain root-level code execution and therefore a root shell.
Read more
March 23, 2021
| by Stefano Lanaro