~/mbt
back to writeups
This machine is currently active on the platform. Full writeup is not available.
hack the-boxmachinemediumLinux active

Stream - HackTheBox

Approach

01

An exposed Spring Boot Actuator heap dump

02

Blind XXE for arbitary file read

03

Enumerate hidden topics via custom SASL config file

04

Kopia backup repository

05

Append root-owned DLQ script via clickhouse and invoke it

Full writeup is restricted while this machine is active.

The writeup will be published here once the machine is retired.