Tag: Eval-Injection

2025 2026 Abliteration Agpl Ai Assumed-Breach Benchmark Browser-Extension Comfyui Ctf Cve-2025-49113 Docker Eval-Injection Flask Forensics Gemma Gemma-4-12b Gemma-4-E2b Gemma-4-E4b Glm Glm-4.7-Flash Gogs Hack-Smarter Hackthebox Hashicorp Hauhaucs Heretic Huggingface Jwt Kl-Divergence Llm Ltx-2 Open-Source Pentest Plagiarism Privilege-Escalation Psreadline Qwen Qwen-3.6 Qwen-3.8 Qwen3-Vl Reaper-Abliteration Roundcube Smtp Uncensored-Llm Vault Video-Generation Vision-Language Windows
Hack the Box - Craft
ctf pentest hackthebox flask eval-injection vault hashicorp gogs jwt 2026

Craft is a medium Hack the Box machine and the whole thing is one mistake repeated four times. A public Gogs server holds the API source, the git history holds a working password, and a private repository holds the developer’s own SSH key, protected by a passphrase I had already dumped.

The bug is one line of Python that runs eval() on the ABV value of a beer. Every wrong attempt came back with the same useless error and the correct one came back as a 500. Root came from HashiCorp Vault, which hands out one-time root SSH passwords to any source address.

October 7, 2026