Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Hack-The-Box-Enigma-Findings-Report — HTB_Enigma Security Assessment – Full pentest completed, chaining NFS disclosure, IMAPS password reuse, and OS Command Injection in OpenSTAManager (CVE-2025-69212) through to root via a misconfigured OliveTin service. Full report and evidence appendix to be published once permitted by HTB's active-machine policy. | Kitploit
Tools/GitHubGitHub/mmoobbeeiidat-design/hack-the-box-enigma-findings-report
OSINT (Open Source Intelligence)Privilege EscalationReconnaissancePassword AttacksVulnerability AnalysisExploitationWeb Application ExploitationInformation GatheringCTF

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →

About

HTB_Enigma Security Assessment – Full pentest completed, chaining NFS disclosure, IMAPS password reuse, and OS Command Injection in OpenSTAManager (CVE-2025-69212) through to root via a misconfigured OliveTin service. Full report and evidence appendix to be published once permitted by HTB's active-machine policy.

Penetration Testing
Learning & Education
GitHubmmoobbeeiidat-design/hack-the-box-enigma-findings-report

Hack-The-Box-Enigma-Findings-Report

View RepositoryWebsite
393 months agoNot yet reviewed
Share

🛡️ Hack The Box - Enigma Findings Report 📋 Overview This repository contains a comprehensive penetration test report for the Hack The Box machine Enigma.

🔍 Key Findings

  • Insecure NFS Share Exposing Onboarding Documents - Medium Severity
  • Internal Credential Disclosure via Unencrypted Email Content - Medium Severity
  • Password Reuse Across Employee IMAPS Accounts - High Severity
  • OpenSTAManager Authenticated OS Command Injection (CVE-2025-69212) - Critical Severity
  • Plaintext Database Credentials in Web Application Config - Medium Severity
  • Weak User Password Enabling Offline Hash Cracking - High Severity
  • OliveTin Unauthenticated Root Automation - Argument-Type Command Injection - Critical Severity
  • User flag captured on host haris
  • Root flag captured via SUID /bin/bash dropped through OliveTin command injection

🛠️ Frameworks Used

  • PentNote - Automated documentation - https://github.com/A1GCH-afk/PentNote
  • MITRE ATT&CK - T1039, T1552.001, T1114, T1110.003, T1078, T1190, T1552.003, T1110.002, T1021, T1543.003, T1548, T1548.001, T1005
  • NSA D3FEND - D3-PA, D3-SVCP, D3-OTP, D3-SPP, D3-CWAM, D3-MA, D3-NTA

🧰 Tools & Scripts Referenced

  • Hydra - password spraying against the IMAPS service
  • Custom Python IMAPS script - mailbox enumeration over imaplib.IMAP4_SSL (port 993)
  • CVE-2025-69212 PoC (BridgerAlderson/CVE-2025-69212-PoC, exploit.py) - OpenSTAManager OS command injection
  • LinPEAS - local privilege escalation enumeration (run twice: once as www-data, once as haris)
  • Hashcat / John the Ripper - offline bcrypt hash cracking
  • curl - crafting the OliveTin StartAction API request for the final command injection

📄 Full Report : Will be published after HTB permit to.

--- Not Published Yet --- View the complete report: Enigma.md

Download Tool