---
id: 3758
title: "[CVE-2023-29017] Hack the Box - Codify Walkthrough"
cve: CVE-2023-29017
source_domain: projectblack.io
source_url: "https://projectblack.io/blog/hack-the-box-codify/"
published_at: "2024-05-31T00:31:57Z"
tags: ["privilege-escalation", "sandbox-escape", "walkthrough", "hack-the-box", "cve-2023-29017", "vm2"]
phying_url: "https://phying.com/item/3758"
lang: en
---

# [CVE-2023-29017] Hack the Box - Codify Walkthrough

## Summary

Hack The Box 'Codify' walkthrough: a vm2 3.9.16 sandbox escape (CVE-2023-29017) in a Node.js code editor yields a shell; a cracked password from tickets.db and sudo abuse lead to root.

## Intelligence Metadata

- **Sources:** projectblack.io
- **CVE:** CVE-2023-29017
- **Published:** 2024-05-31T00:31:57Z
- **Original:** https://projectblack.io/blog/hack-the-box-codify/
- **Phying News:** https://phying.com/item/3758