Interpreter

Platform: HackTheBox | Category: Machines | Type: Machine | Difficulty: Medium | OS: Linux | Author: DonutMaster | Date: 2026-05-31 | Status: Solved Techniques: Java WebStart .jnlp Analysis, Mirth Connect Deserialization RCE (CVE-2023-43208), MySQL Database Enumeration, Sudo Privilege Escalation

Summary

Walkthrough of the HackTheBox Medium machine Interpreter (Linux). Foothold is gained by analyzing the Mirth Connect .jnlp configuration and exploiting CVE-2023-43208 (Java deserialization RCE). Lateral movement via MySQL database configuration and privileges to user sedric, and final root escalation.

Recon

Port Scan

 bash read-only • copy allowed Copy
rustscan -a interpreter.htb -- -A

Foothold

Exploitation (CVE-2023-43208)

1. Download the .jnlp launcher file from the Mirth Connect web interface to confirm version 4.4.0.
2. Use Metasploit or a custom exploit script for Mirth Connect Deserialization RCE (exploit/multi/http/mirth_connect_cve_2023_43208) targeting port 443.
3. Spawn a reverse shell as user mirth.

Privilege Escalation

Enumeration & Lateral Movement

1. Inspect /usr/local/mirthconnect/conf/mirth.properties to find database credentials.
2. Dump the MySQL database (guardiandb) to locate internal user hashes and credentials.
3. Escalate / SSH to internal user accounts.

Flags

Key Takeaways / Lessons

• Always inspect Java WebStart .jnlp files exposed by enterprise integration software like Mirth Connect to determine exact software versions and attack surfaces.