> For the complete documentation index, see [llms.txt](https://hacking-notes.jord4n.pro/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://hacking-notes.jord4n.pro/writeups-ctf/hackthebox/linux-medium.md). # HTB Linux Medium HackTheBox Linux Medium machine writeups covering web exploitation, SQL injection, SSRF, CMS RCE, credentials, pivoting, and Linux privilege escalation. Linux Medium HackTheBox machines with deeper exploitation chains, pivoting, and privilege escalation workflows.

:linux:

MonitorsThree HackTheBox Linux Medium

MonitorsThree HackTheBox Medium Linux machine writeup covering Subdomain Enumeration, SQLI - Manual Time Based Blind Injection (Python Scripting), Cracking Hashes, Cacti Exploitation (CVE-2024-25642) - Malicious Package Import, with practical enumeration, exploitation, foothold, and privilege escalation notes.MonitorsThree HackTheBox Writeup

:linux:

Devzat HackTheBox Linux Medium

Devzat HackTheBox Medium Linux machine writeup covering Fuzzing Directory, Web Injection (RCE), Abusing InfluxDB (CVE-2019-20933), Abusing Devzat Chat /file command (Privilege Escalation), with practical enumeration, exploitation, foothold, and privilege escalation notes.Devzat HackTheBox Writeup

:linux:

Bolt HackTheBox Linux Medium

Bolt HackTheBox Medium Linux machine writeup covering Information Leakage, Subdomain Enumeration, SSTI (Server Side Template Injection), Abusing PassBolt, with practical enumeration, exploitation, foothold, and privilege escalation notes.Bolt HackTheBox Writeup

:linux:

Solidstate HackTheBox Linux Medium

Solidstate HackTheBox Medium Linux machine writeup covering Abusing James Remote Administration Tool, Changing a user's email password, Information Leakage, Escaping Restricted Bash (rbash), with practical enumeration, exploitation, foothold, and privilege escalation notes.Solidstate HackTheBox Writeup

:linux:

Hawk HackTheBox Linux Medium

Hawk HackTheBox Medium Linux machine writeup covering OpenSSL Cipher Brute Force and Decryption, Drupal Enumeration/Exploitation, H2 Database Exploitation, with practical enumeration, exploitation, foothold, and privilege escalation notes.Hawk HackTheBox Writeup

:linux:

Node HackTheBox Linux Medium

Node HackTheBox Medium Linux machine writeup covering Information Leakage, API Enumeration, Cracking Hashes, Cracking ZIP file, with practical enumeration, exploitation, foothold, and privilege escalation notes.Node HackTheBox Writeup

:linux:

Union HackTheBox Linux Medium

Union HackTheBox Medium Linux machine writeup covering SQLI (SQL Injection) - UNION Injection, SQLI - Read Files, HTTP Header Command Injection - X-FORWARDED-FOR (RCE), Abusing sudoers privilege (Privilege Escalation), with practical enumeration, exploitation, foothold, and privilege escalation notes.Union HackTheBox Writeup

:linux:

Backfire HackTheBox Linux Medium

Backfire HackTheBox Medium Linux machine writeup covering Information Leakage (Yaotl file), Havoc-C2 Exploitation (Port 40046), SSH Key Creation, Pivoting (User: Sergej), with practical enumeration, exploitation, foothold, and privilege escalation notes.Backfire HackTheBox Writeup

:linux:

Apocalyst HackTheBox Linux Medium

Apocalyst HackTheBox Medium Linux machine writeup covering Wordpress Enumeration, Image Stego Challenge - Steghide, Information Leakage - User Enumeration, WordPress Exploitation - Theme Editor (RCE), with practical enumeration, exploitation, foothold, and privilege escalation notes.Apocalyst HackTheBox Writeup

:linux:

Poison HackTheBox Linux Medium

Poison HackTheBox Medium Linux machine writeup covering Local File Inclusion (LFI), Cracking ZIP file, Abusing VNC - vncviewer (Privilege Escalation), with practical enumeration, exploitation, foothold, and privilege escalation notes.Poison HackTheBox Writeup

:linux:

Waldo HackTheBox Linux Medium

Waldo HackTheBox Medium Linux machine writeup covering LFI (Local File Inclusion) - Filter Bypass, Obtaining a user's SSH private key through the LFI, Escaping from a container, Restricted Shell Bypass, with practical enumeration, exploitation, foothold, and privilege escalation notes.Waldo HackTheBox Writeup

:linux:

Chaos HackTheBox Linux Medium

Chaos HackTheBox Medium Linux machine writeup covering Password Guessing, Abusing e-mail service (claws-mail), Crypto Challenge (Decrypt Secret Message - AES Encrypted), LaTeX Injection (RCE), with practical enumeration, exploitation, foothold, and privilege escalation notes.Chaos HackTheBox Writeup

:linux:

Stratosphere HackTheBox Linux Medium

Stratosphere HackTheBox Medium Linux machine writeup covering Apache Struts Exploitation (CVE-2017-5638), Python Library Hijacking (Privilege Escalation), with practical enumeration, exploitation, foothold, and privilege escalation notes.Stratosphere HackTheBox Writeup

:linux:

Cat HackTheBox Linux Medium

Cat HackTheBox Medium Linux machine writeup covering Directory Fuzzing (.git file), Source Code Analysis (Git Repository Dump), Stored XSS Exploitation & Session Hijacking, SQL Injection (SQLite) using sqlmap, with practical enumeration, exploitation, foothold, and privilege escalation notes.Cat HackTheBox Writeup

:linux:

Heal HackTheBox Linux Medium

Heal HackTheBox Medium Linux machine writeup covering LFI (Local File Inclusion), RCE (Remote Code Execution) in LimeSurvey, Hash Cracking with Hashcat, User Pivoting, with practical enumeration, exploitation, foothold, and privilege escalation notes.Heal HackTheBox Writeup

:linux:

Cypher HackTheBox Linux Medium

Cypher HackTheBox Medium Linux machine writeup covering Java .jar file reverse engineering with JD-GUI, Vulnerability analysis of custom Java code, Cypher injection in Neo4j, Remote Code Execution (RCE) through unsanitized input, with practical enumeration, exploitation, foothold, and privilege escalation notes.Cypher HackTheBox Writeup

:linux:

Principal HackTheBox Linux Medium

Principal HackTheBox Medium Linux machine writeup covering pac4j JWE authentication bypass, API enumeration, SSH credential reuse, and SSH Certificate Authority abuse for privilege escalation, with practical enumeration, exploitation, foothold, and privilege escalation notes.Principal HackTheBox Writeup
--- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation by asking a question. Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters: ``` GET https://hacking-notes.jord4n.pro/writeups-ctf/hackthebox/linux-medium.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.