HackTheBox Writeup: Precious

This blog post contains my writeup for HackTheBox’s Precious. This box was about Ruby, PDFKit, and YAML. This was an active box at the time of Pwning.

Table of Contents

• Reconnaissance
• HTTP
• PDFKit Command Injection Vulnerability
• Exploiting the PDFKit Command Injection Vulnerability
• SSH
• Privilege Escalation
• Exploiting YAML Deserialization

Reconnaissance

I started by checking the connection to the box using,

$ ping 10.10.11.189

I was connected to 10.10.11.189, so I went on with a Nmap scan using

$ nmap -sC …

cybersecurity hacking hackthebox linux ruby