HTB Machine: Sau (Retired)

Platform: HackTheBox Difficulty: Easy Status: Retired OS: Linux

Enumeration

Nmap scan revealed ports 22, 80, and 55555 (Request Baskets).

Foothold

Exploited SSRF vulnerability in Request Baskets (CVE-2023-27163) to access internal Maltrail v0.54 service.

Privilege Escalation

Maltrail command injection yielded root shell via sudo rights on systemctl status mail.service.