Hack The Box: Backfire Machine

After years of playing the cybersecurity labs at Hack The Box , I finally had an idea for a machine. I spent some time in 2024 researching vulnerabilities in open source Command and Control (C2) frameworks , and simultaneously another researcher Chebuya was working on the same topic. We found that two of our exploits made a chain, combining for a full remote compromise of a C2 server behind a…