Devvortex Write-Up

A tiny flaw can cause total chaos

INTRODUCTION

Hello everyone, welcome back to my infosec journey! Today we’ll discuss Devvortex, an Easy-difficulty machine from the Hackthebox website.

This time, we need to find a subdomain that leads to a Joomla! administration page. The Joomla service is vulnerable to CVE-2023-23752, which can be exploited via the Metasploit framework. After exploitation, we use the credentials of user lewis to access a CpanelAdmin. This allows us to write a PHP reverse …

ctf-writeup hacking hackthebox-writeup info-sec-writeups pentesting