Search Ctrl + K

Search Ctrl + K

Home

HTB-Machines

HTB-Season-10

HTB-Season10-DevArea

HTB-Season10-Interpreter

HTB-Season10-Kobold

HTB-Season10-Pirate

HTB-Season10-Pterodactyl

HTB-Season-10-Facts

HTB-Season-11

HTB Connected Writeup

HTB-Season-11-Reactor

Enter your search text in the box above

Select a result to preview

Enter to select

⇅ to navigate

ESC to close

HTB-Season-11-Reactor

🔒 Verifying access...

❯ react to this write-up

COMMENTS

❯ loading comments...

Connected Pages

HTB-Season-11-Reactor

Overview
Enumeration :
1. Port Scanning — Nmap
2. Web Fingerprinting — Wappalyzer
Exploitation — CVE-2025-55182 (Next.js RCE)
Post-Exploitation — Database Credential Dump
1. Database Schema
2. Extracted Credentials
Password Cracking — Hashcat (MD5)
Lateral Movement — User Flag
Privilege Escalation — Node.js Inspector Debug Socket
1. Internal Port Discovery
2. Exploiting Node Inspector for RCE as Root
Attack Chain Summary
Tools Used
Key Takeaways

Pages mentioning this page

No other pages mentions this page