https://hekk.one/tags/pack2theroot/ Recent content in PACK2THEROOT on HEKK Hugo -- gohugo.io en info@hekk.one info@hekk.one © 2026 Tue, 01 Sep 2026 00:00:00 +0000 https://hekk.one/writeups/offsec/pg_practice/flink/ Tue, 01 Sep 2026 00:00:00 +0000 info@hekk.one https://hekk.one/writeups/offsec/pg_practice/flink/ Apache Flink 2.0.0 on port 8081 is exploited via Metasploit’s JAR Upload RCE module for initial access. LinPEAS identifies Pack2TheRoot (CVE-2026-41651), enabling privilege escalation to root. https://hekk.one/writeups/offsec/pg_practice/zab/ Sun, 30 Aug 2026 00:00:00 +0000 info@hekk.one https://hekk.one/writeups/offsec/pg_practice/zab/ Gobuster finds local.txt on port 80. A Mage web app on port 6789 provides browser-based terminal access. The server is vulnerable to Pack2TheRoot (CVE-2026-41651), enabling privilege escalation to root. https://hekk.one/writeups/offsec/pg_practice/backupbuddy/ Fri, 28 Aug 2026 00:00:00 +0000 info@hekk.one https://hekk.one/writeups/offsec/pg_practice/backupbuddy/ PHP File Manager on port 80 allows default login and path traversal to Brian’s SSH key. SSH access is gained, then CVE-2026-41651 is exploited to become root. https://hekk.one/writeups/offsec/pg_practice/meditrack/ Tue, 18 Aug 2026 00:00:00 +0000 info@hekk.one https://hekk.one/writeups/offsec/pg_practice/meditrack/ SQLi on port 9000 dumps creds. Crack meditrackDev for Gitea access. Find Flask secret to forge admin cookie, then import snapshot for Pickle RCE. Escalate to root via CVE-2026-41651.