Detailed step-by-step walkthrough for Hack The Box's GreenHorn machine, covering LFI, Pluck CMS exploitation, hardcoded credentials, and privilege escalation to root.

Investigating 1337 Corp Logs

Impersonating Domain MX Record Change Detected

PHP Injection & SUID Exploit

hMailServer LFI, Outlook CVE, LibreOffice Exploit

Weak Password & Poor Sudo Permission

Insecure App & Cronjob Exploit

Drupal 7 CVE & Snap SUDO exploit

Stored XSS, Cookie Theft, & Path Injection

PHP Injection & SUID Exploit