CyberSaif
/ write-ups

Hack the Box.
CTFs.

Documented guides on challenges, user access, and privilege escalation.

Hack the Box

HTB: SmartHire

Exploiting Python's pickle deserialization in MLflow and abusing a poorly configured site.addsitedir() for arbitrary code execution.

  • MachineLearning
  • Model_Serialization_Attack
  • MLflow
ML Exploitation · Medium Open ↗
Hack the Box

HTB: Helix

Helix is a medium-level ICS-focused machine with Apache NiFi running as an external service and OPC UA as an internal service.

  • ApacheNiFi
  • OPC-UA
ICS Security · Medium Open ↗
Hack the Box

HTB: Cohort

An easy-difficulty machine with an SSRF vulnerability that exposes internal services and is running an older version of PackageKit.

  • PackageKit
  • Marimo
Web Exploitation · Easy Open ↗
Hack the Box

HTB: Orion

A very simple machine with vulnerable versions of Craft CMS and Telnet.

  • CraftCMS
  • Telnetd
Web Exploitation · Easy Open ↗
Hack the Box

HTB: Connected

Exploiting CVE-2025-57819 in the FreePBX system, and abusing incron.d and dahdi.conf for privilege escalation.

  • FreePBX
  • Asterisk
  • incron.d
Web Exploitation · Medium Open ↗
Hack the Box

HTB: Silentium

Easy machine running Flowise AI. It's vulnerable to CVE-2025-58434, which leaks user credentials, and CVE-2025-59528, which enables RCE through the CustomMCP node.

  • FlowiseAI
  • Gogs
Web Exploitation · Easy Open ↗