Eloquia

Eloquia - hack the-box retired machine walkthrough.

Approach

OAuth Logic Flaw and HTML injection for admin takeover.

CVE-2024-47881 (OpenRefine SQLite `load_extension` RCE).

Custom reverse shell generation to bypass Windows Defender.

Decrypt the saved passwords from browser.

Run a loop to replace a legitimate binary with our exploit.

Loading writeup from GitHub...