HackTheBox Writeups

92 writeups 2× Very Easy 37× Easy 29× Medium 13× Hard 9× Insane

Join CTF Team

Difficulty

Tag

Access

Sort

Showing 1–2 of 2

Easy Linux

Exploit Drupalgeddon2 RCE on a Drupal site, crack harvested MySQL creds, then abuse dirty_sock via snap for root escalation.

webshell rce drupal mysql +4

Mohammad Meraj • Aug 4, 2026

Medium Linux

SQL injection auth bypass, webshell upload via image magic bytes, mysqldump credential harvesting, and suid binary PATH hijack for root.

Mohammad Meraj • Jul 30, 2026

Other platforms

Proving Grounds 110 TryHackMe 10 All writeups