/ tags/ RCE

# Remote

Hack-The-Box 55 / 72
6 min read

Windows Easy machine - Remote.

HTB Windows RCE Remote Code Execution — the ability to run arbitrary commands on a target system remotely. Sudo Linux command for running as another user — misconfigured sudo rules are a common privilege escalation path. Nmap A network scanner used to enumerate open ports, services, and versions on a target. PHP FTP File Transfer Protocol — frequently misconfigured with anonymous access, exposing sensitive files. SMB Server Message Block — Windows file-sharing protocol, frequently abused for enumeration and lateral movement. NFS Network File System — shared Linux file storage, sometimes exported with no_root_squash for privilege escalation.
Read

# Planning

Hack-The-Box 49 / 72
6 min read

Linux Easy machine - Planning.

HTB Active Directory Microsoft's directory service for managing users, computers, and permissions across a Windows domain. RCE Remote Code Execution — the ability to run arbitrary commands on a target system remotely. Linux SSH Secure Shell — encrypted remote login, targeted via key theft, brute force, or misconfigured access. CVE A publicly catalogued, known vulnerability with a unique identifier (Common Vulnerabilities and Exposures). Cronjob A scheduled task on Linux — often abused for privilege escalation when it runs as root with a writable script.
Read

# Pandora

Hack-The-Box 48 / 72
4 min read

Linux Medium machine - Pandora.

HTB RCE Remote Code Execution — the ability to run arbitrary commands on a target system remotely. Linux SSH Secure Shell — encrypted remote login, targeted via key theft, brute force, or misconfigured access. PHP SUID A Linux permission bit that runs a binary as its owner — misconfigured SUID binaries are a classic privesc vector. SQLi SQL Injection — manipulating database queries via unsanitized input to read or alter data. SNMP Simple Network Management Protocol — can leak device info via weak or default community strings.
Read

# Nineveh

Hack-The-Box 46 / 72
6 min read

Linux Medium machine - Nineveh.

HTB RCE Remote Code Execution — the ability to run arbitrary commands on a target system remotely. Linux SSH Secure Shell — encrypted remote login, targeted via key theft, brute force, or misconfigured access. Nmap A network scanner used to enumerate open ports, services, and versions on a target. PHP LFI Local File Inclusion — a web vulnerability letting an attacker read arbitrary files on the server. MySQL Brute Force Systematically trying many credential combinations until one succeeds. SUID A Linux permission bit that runs a binary as its owner — misconfigured SUID binaries are a classic privesc vector. Cronjob A scheduled task on Linux — often abused for privilege escalation when it runs as root with a writable script.
Read

# Netmon

Hack-The-Box 45 / 72
3 min read

Windows Easy machine - Netmon.

HTB Windows RCE Remote Code Execution — the ability to run arbitrary commands on a target system remotely. Nmap A network scanner used to enumerate open ports, services, and versions on a target. CVE A publicly catalogued, known vulnerability with a unique identifier (Common Vulnerabilities and Exposures). FTP File Transfer Protocol — frequently misconfigured with anonymous access, exposing sensitive files. SMB Server Message Block — Windows file-sharing protocol, frequently abused for enumeration and lateral movement.
Read