R3fr4kt/DEVVORTEX

PoC

A comprehensive technical walkthrough detailing the compromise of the Devvortex machine on HackTheBox. This path demonstrates Subdomain Fuzzing, Joomla API Enumeration, Template Modification for initial access, Database Hash Extraction & Cracking for lateral movement, and exploitation of Apport-CLI (CVE-2023-1326) for privilege escalation to root.

view exploit source poc_in_githubauthor R3fr4ktpublished 2026-09-12catalog poc_in_github
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2023-1326UShigh7.8Exploit
A privilege escalation attack was found in apport-cli 2.26.0 and earlier which is similar to CVE-2023-26604. If a system is specially configured to allow unprivileged users to run…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan