skip to content
~/bokkapig
_
hack the box machine writeups
[1]
machines
[2]
refs
[3]
cheatsheet
[4]
search
[5]
pdf-inject
← cd ../tags
grep -l "Default Credentials" ./machines
[2]
sorted: date ▼
$ grep
/
difficulty
easy
clear ✕
name
diff
os
date
tags
Connected
easy
linux
2026-06-06
not yet retired
CCTV
easy
linux
2026-03-07
Default ZoneMinder credentials lead to RCE as www-data. Lateral movement via cracked bcrypt hash to SSH as mark, then sniffing Docker inter-container traffic for sa_mark credentials. Privilege escalation by abusing motionEye running as root to inject a reverse shell into camera event hooks.
zoneminder
·
default credentials
·
docker
·
motioneye
·
credential sniffing
·
rce
no machines match that filter
