https://maxisfront.me/tags/motioneye/ Recent content in MotionEye on MaxisFront Hugo en Sun, 19 Jul 2026 00:00:00 +0000 https://maxisfront.me/posts/writeup-cctv-htb/ Sun, 19 Jul 2026 00:00:00 +0000 https://maxisfront.me/posts/writeup-cctv-htb/ <blockquote> <p>All rights reserved by <strong>Hack The Box LTD</strong>.</p> </blockquote> <div class="flash mb-3"> <blockquote> <p>Summary</p> </blockquote> <ul> <li>Exploitation of default credentials on <code>ZoneMinder</code></li> <li>Exploitation of a boolean-based, time-based <code>SQLi</code> (<code>CVE-2024-51482</code>)</li> <li>Exploitation of <code>RCE</code> in <code>MotionEye</code> via a &ldquo;<code>client-side</code>&rdquo; bypass (<code>CVE-2025-60787</code>)</li> <li>Security recommendations to prevent and mitigate vulnerabilities on this machine.</li> </ul> </div> <h4 id="skills-used">Skills Used</h4> <ul> <li>Port scanning</li> <li>Use of basic GNU/Linux-based commands</li> <li>Exploitation of <code>SQLi Boolean-based</code> and <code>time-based</code> using <code>SQLmap</code>.</li> <li>Cracking hashes using dictionary attacks.</li> <li>Bypassing client-side validations (<code>JavaScript</code>).</li> <li>Applying <code>Port Forwarding</code> via <code>SSH</code> to access internal services.</li> <li>Exploiting <code>RCE</code> in web applications.</li> </ul> <h4 id="tools-used">Tools Used</h4> <ul> <li>ping</li> <li>nmap</li> <li>caido</li> <li>sqlmap</li> <li>hashcat</li> <li>ssh</li> <li>ss</li> <li>nc</li> </ul> <hr> <h2 id="vulnerability-assesment-and-analysis">Vulnerability Assesment and Analysis</h2> <p>The <code>HTB</code> platform provides us with the target <code>IP</code>, which is <code>10.129.47.195</code>—an address that can be reached by connecting through the <code>VPN</code> assigned to us by the platform.</p>