Touch HTB

A kiosk-style airport check-in terminal that looks locked down until you start thinking about it as a physical device rather than just a web app. Getting past the login means finding a serial number buried in an API endpoint, and breaking out of the kiosk itself takes a bit of lateral thinking about how the hardware behaves when something stops responding. Root comes down to a well-known database privilege escalation once the right file turns up the right password. This writeup is currently locked because the machine is still active on the Hack The Box platform. As per HTB policy, public writeups for active machines are not allowed. To avoid policy violations and potential account restrictions, this writeup will remain locked until the machine is retired. Once retired, the full writeup will be made available.

Difficulty: Easy · OS: linux · Category: HTB