HackTheBox Writeups

92 writeups 2× Very Easy 37× Easy 29× Medium 13× Hard 9× Insane

Join CTF Team

Difficulty

Tag

Access

Sort

Tag: nextjs Clear all

Showing 1–1 of 1

Easy Linux

Reactor Writeup - HackTheBox

Unauthenticated Next.js RCE via React2Shell (CVE-2025-55182), crack a reused hash from the app SQLite database for SSH, then abuse a root Node --inspect debug port for root.

prototype-pollution rce nodejs nextjs +4

Joshua • May 23, 2026 • 4 min read

Other platforms

Proving Grounds 110 TryHackMe 10 All writeups