/ tags/ Path Traversal

# VariaType

Hack-The-Box 71 / 72
9 min read

Linux Medium machine - VariaType.

HTB RCE Remote Code Execution — the ability to run arbitrary commands on a target system remotely. Linux Sudo Linux command for running as another user — misconfigured sudo rules are a common privilege escalation path. SSH Secure Shell — encrypted remote login, targeted via key theft, brute force, or misconfigured access. Nmap A network scanner used to enumerate open ports, services, and versions on a target. PHP Buffer Overflow Writing more data into a buffer than it can hold, corrupting adjacent memory to hijack program execution. Git Path Traversal Using '../' sequences to escape a web app's intended directory and read arbitrary files.
Read

# Servmon

Hack-The-Box 60 / 72
5 min read

Windows Easy machine - Servmon.

HTB Active Directory Microsoft's directory service for managing users, computers, and permissions across a Windows domain. Windows Linux SSH Secure Shell — encrypted remote login, targeted via key theft, brute force, or misconfigured access. Nmap A network scanner used to enumerate open ports, services, and versions on a target. FTP File Transfer Protocol — frequently misconfigured with anonymous access, exposing sensitive files. Brute Force Systematically trying many credential combinations until one succeeds. Path Traversal Using '../' sequences to escape a web app's intended directory and read arbitrary files.
Read

# Code

Hack-The-Box 19 / 72
7 min read

Unknown Unknown machine - Code.

HTB Active Directory Microsoft's directory service for managing users, computers, and permissions across a Windows domain. Linux Sudo Linux command for running as another user — misconfigured sudo rules are a common privilege escalation path. SSH Secure Shell — encrypted remote login, targeted via key theft, brute force, or misconfigured access. Nmap A network scanner used to enumerate open ports, services, and versions on a target. Brute Force Systematically trying many credential combinations until one succeeds. Path Traversal Using '../' sequences to escape a web app's intended directory and read arbitrary files.
Read