Post

Hack The Box - Unrested

Posted
By nicetrykiddo
1 min read
Hack The Box - Unrested

User

Recon

1
2
3
4
5

PORT      STATE SERVICE        REASON
22/tcp    open  ssh            syn-ack
80/tcp    open  http           syn-ack
10050/tcp open  zabbix-agent   syn-ack
10051/tcp open  zabbix-trapper syn-ack

credentials matthew:96qzn0h2e1k3

zabbix version 7.0.0 vulnerable to sqli CVE-2024-42327

then use copy fail exploit

HackTheBox, Machines
Medium zabbix sqli cve-2024-42327 Intro-to-Zephyr
This post is licensed under CC BY 4.0 by the author.