HackTheBox Easy Linux

Conversor

An unsanitized XSLT parser allows arbitrary file writes for RCE. Credentials are recovered from a SQLite database. A Perl config injection grants a root shell.

#Linux#Easy#FTP#SQLite#XSLT-Injection#Linpeas#Hash-Identifier#Hashcat#needrestart#Perl