https://h4ckr00t.com/tags/htb/ Recent content in HTB on H4CK R007 Hugo en-us Thu, 24 Sep 2026 00:53:16 +0300 https://h4ckr00t.com/posts/pterodactyl/ Thu, 24 Sep 2026 00:53:16 +0300 https://h4ckr00t.com/posts/pterodactyl/ HackTheBox — Pterodactyl Machine Writeup Difficulty: Medium | OS: Linux (openSUSE) Table of Contents Machine Overview Credentials & Flags Cheatsheet Phase 1 — Reconnaissance Phase 2 — Enumeration Phase 3 — Vulnerability Discovery (CVE-2025-49132) Phase 4 — LFI Exploitation (Extracting Secrets) Phase 5 — Remote Code Execution Phase 6 — Post-Exploitation (DB Access & Hash Cracking) Phase 7 — Stable SSH Access & User Flag Phase 8 — Privilege Escalation (CVE-2025-6018 + CVE-2025-6019) Phase 9 — Root Flag Lessons Learned & Key Takeaways Full Attack Chain Diagram Machine Overview Field Value Machine Name Pterodactyl IP Address 10.