PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

[CVE-2023-29017] Hack the Box - Codify Walkthrough

projectblack.io | research | CVE-2023-29017 | #privilege-escalation | #sandbox-escape | #walkthrough | #hack-the-box | #cve-2023-29017 | #vm2
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Hack The Box 'Codify' walkthrough: a vm2 3.9.16 sandbox escape (CVE-2023-29017) in a Node.js code editor yields a shell; a cracked password from tickets.db and sudo abuse lead to root.
CVE
CVE-2023-29017
Published
Collected

Related coverage

blog · projectzero.google
More Mac OS X and iPhone sandbox escapes and kernel bugs
A Google Project Zero rundown of sandbox escape and privilege escalation bugs in Mac OS X and iOS fixed by Apple in OS X 10.9.5 and iOS 8.
research · github.com
Infinity Core: Linux Kernel Core Subsystems LPE and Container Escape Research
Unlike most modern Linux kernel exploits that depend on networking, eBPF, or unprivileged user namespaces, these vulnerabilities reside in fundamental kernel core subsystems, rendering standard container sandboxes and Android application domain restrictions ineffective against local privilege escalation.
research · mccaulay.co.uk
go2shell: Rooting Home Assistant through SSDP
# go2shell: Rooting Home Assistant through SSDP 7 October 20267 October 2026 McCaulayVulnerability Research ## Introduction Home Assistant is one of the most widely deployed open-source home...
research · slcyber.io
Out of Bounds, Out of Sandbox: RCE in Go JavaScript Engine
# Out of Bounds, Out of Sandbox: RCE in Go JavaScript Engine Get research alerts Share on social 20 min read ### Table of Contents TOC Element # Introduction Lately it feels like we've been...
research · starlabs.sg
[CVE-2025-39964] How I Found a $113,337 AF_ALG Linux Local Privilege Escalation Before Copy Fail
A retrospective on CVE-2025-39964, an AF_ALG race condition causing out-of-bounds scatterlist access in the Linux kernel. Exploitation yields root and a Docker container escape.
research · calif.io
Dark Elevator (CVE-2026-50343)
# Dark Elevator (CVE-2026-50343) A pure-logic, 100% reliable path from a normal user to SYSTEM. Carlos Roque July 22, 2026 windowsmadbugs Contents 1. The Bugs 2. PoC 3. Disclosure Timeline > No...
Back