skip to content
~/bokkapig
_
hack the box machine writeups
[1]
machines
[2]
refs
[3]
cheatsheet
[4]
search
[5]
pdf-inject
← cd ../tags
grep -l "MinIO" ./machines
[1]
sorted: date ▼
$ grep
/
difficulty
easy
clear ✕
name
diff
os
date
tags
Facts
easy
linux
2026-01-31
Exploited CamaleonCMS path traversal (CVE-2024-46987) to extract MinIO credentials and an encrypted SSH key, then escalated via sudo facter --custom-dir to root.
camaleoncms
·
cve-2024-46987
·
lfi
·
minio
·
ssh key cracking
·
facter sudo abuse
no machines match that filter
