HTB: Autopilot$ cat autopilot.md | grep -E "time|words"1 min read · 39 words#htb-s12-aero[!] ACTIVE MACHINE This machine is currently active on Hack The Box. Per the HTB Terms of Service, the writeup of this box will be made public after it retires. Please check back later.TL;DR#Pwned# View image largerKeep browsingview matrix →←previous box#990#990activeHTB: StreamOSlinuxDIFFICULTYmediumRELEASED2026-10-10#htb-s12-aeroread writeup →#603next box→#603retiredHTB: BoardLightBoardLight is an easy Linux machine featuring a Dolibarr CRM/ERP instance vulnerable to CVE-2023-30253, PHP code injection to gain a foothold, reused database credentials to pivot laterally, and an Enlightenment SUID abuse (CVE-2022-37706) for privesc.OSlinuxDIFFICULTYeasyRELEASED2024-05-25#cve-2022-37706#cve-2023-30253#default-credentials#dolibarr#enlightenment#ffuf#htb-s05-anomalies#netcat#nmap#password-reuse#path-traversal#php-code-injection#pty-upgrade#reverse-shell#seclists#sudo-abuse#suid-abuse+9read writeup →‹ ›
#603retiredHTB: BoardLightBoardLight is an easy Linux machine featuring a Dolibarr CRM/ERP instance vulnerable to CVE-2023-30253, PHP code injection to gain a foothold, reused database credentials to pivot laterally, and an Enlightenment SUID abuse (CVE-2022-37706) for privesc.OSlinuxDIFFICULTYeasyRELEASED2024-05-25#cve-2022-37706#cve-2023-30253#default-credentials#dolibarr#enlightenment#ffuf#htb-s05-anomalies#netcat#nmap#password-reuse#path-traversal#php-code-injection#pty-upgrade#reverse-shell#seclists#sudo-abuse#suid-abuse+9read writeup →
