Đang tải bảng tin…
0xdf hacks stuff0 Hot0 bình luận21 phút đọc
HTB: Abducted
A walkthrough of the HackTheBox machine 'Abducted', a Linux box exploited through multiple chained vulnerabilities. The initial foothold uses CVE-2026-4480, a command injection in Samba's printing subsystem where the print job name (%J substitution) is passed to the shell unescaped, allowing RCE as nobody. Lateral movement to scott is achieved by decoding an obfuscated rclone backup config password. Access to marcus is gained by abusing a Samba share configured with wide links and force user, allowing an SSH key to be planted in marcus's home directory via SMB symlink traversal. Root is obtained by writing a malicious ExecStartPre directive to the smbd systemd drop-in directory (writable by the operators group) and restarting smbd via a polkit rule that permits operators to manage that specific service.
Nguồn: https://0xdf.gitlab.io/2026/07/07/htb-abducted.html. 8sync News chỉ tóm tắt và dẫn link; bản quyền nội dung thuộc tác giả và nguồn gốc.
Đề xuất cho bạn
All Things Open76 Hot3 phútAI
What is immutable Linux and should you switch to it?
Hệ điều hành Linux bất biến (Immutable Linux) phân phối OS dưới dạng image phiên bản có …
