skip to content
~/bokkapig
_
hack the box machine writeups
[1]
machines
[2]
refs
[3]
cheatsheet
[4]
search
[5]
pdf-inject
← cd ../tags
grep -l "Pearcmd" ./machines
[1]
sorted: date ▼
$ grep
/
difficulty
medium
clear ✕
name
diff
os
date
tags
Pterodactyl
medium
linux
2026-02-07
Unauthenticated RCE via Pterodactyl Panel LFI (CVE-2025-49132), credential reuse for SSH, then privilege escalation via PAM session injection (CVE-2025-6018) chained with udisks2 XFS resize race condition (CVE-2025-6019) to obtain root.
cve-2025-49132
·
lfi
·
pearcmd
·
rce
·
cve-2025-6018
·
cve-2025-6019
·
+6
no machines match that filter