Interpreter - HTB Machine Writeup

Difficulty: Medium | OS: Linux | Status: Completed

Exploit Mirth Connect 4.4.0 via CVE-2023-43208 RCE, crack a PBKDF2-SHA256 hash with hashcat, and escalate to root through a Python eval() f-string injection in a locally running Flask service.

Tags: CVE 2023-43208, PBKDF2 Cracking, Python Eval Injection