https://sirzak.rocks/categories/hack-the-box/Recent content in Hack the Box on SirZakHugo -- gohugo.ioen© 2026 SirZakFri, 21 Aug 2026 10:00:00 -0500https://sirzak.rocks/writeups/lame/Fri, 21 Aug 2026 10:00:00 -0500https://sirzak.rocks/writeups/lame/<h2 class="relative group">Summary <div id="summary" class="anchor"></div> <span class="absolute top-0 w-6 transition-opacity opacity-0 -start-6 not-prose group-hover:opacity-100 select-none"> <a class="text-primary-300 dark:text-neutral-700 !no-underline" href="#summary" aria-label="Anchor">#</a> </span> </h2> <p>Lame is the oldest box on Hack The Box and still the cleanest demonstration of why version enumeration matters more than tooling. An outdated Samba service exposes a command-injection flaw that hands over a root shell directly — there is no privilege escalation step, because the vulnerable service is already running as root.</p>