DutyBound is a Medium difficulty HackTheBox machine that is part of Season 12.
1. Network Reconnaissance & IATA BCBP Protocol
1.1 Network Service Discovery
1.2 Web Endpoint Enumeration
1.3 IATA BCBP Error Handling & Protocol Format Analysis
2. IATA BCBP SQL Injection & Initial Access
2.1 Vulnerability Identification
2.2 Payload Construction & RCE
3. X11 Session Hijacking
3.1 Local Enumeration
3.2 Active Session & Display Enumeration
3.3 X11 Architecture & Extension Security Analysis
3.4 User Flag
4. Systemd Path Monitoring & Insecure Bash Escalation
4.1 Local Group Permission Audit
4.2 Systemd Automation & Path Unit Analysis
4.3 Source Code Review
4.4 Root Flag
Writeup Pending Retirement
This machine is currently active, so the full walkthrough is temporarily unavailable. The complete writeup will be published once the machine is officially retired.
Enjoying Project Null Byte? If you'd like to support my learning journey and help me create more cybersecurity content, you can buy me a coffee.
