PaperWork HTB
Paperwork is an easy Linux machine about printing infrastructure and source-code review. A downloadable application and an unusual print service lead in, and internal services that trust each other a little too much lead to root. Paperwork (paperwork.htb) is an easy Linux machine with SSH, a website and an unusual service on TCP 1515. The website offers a downloadable application, which makes this one of the rare boxes where reading source code is the main enumeration step. The theme is printing infrastructure: print daemons, printer job languages and the internal services that support them. After the foothold you move between users by understanding how those services actually work, and the final step is about how Linux processes share resources with each other locally. Skills practiced: Python source-code review, the LPD print protocol, crafting protocol messages by hand, SSH key-based access, UNIX domain socket enumeration, and Linux inter-process communication. The full step-by-step walkthrough unlocks on this page as soon as the machine retires. This writeup is currently locked because the machine is still active on the Hack The Box platform. As per HTB policy, public writeups for active machines are not allowed. To avoid policy violations and potential account restrictions, this writeup will remain locked until the machine is retired. Once retired, the full writeup will be automatically unlocked and made available.
Difficulty: Easy · OS: linux · Category: HTB