[HTB] Celestial — Writeup (OSWE-Prep)

Celestial is a medium difficulty Linux box. Good learning path for:

• NodeJS Deserialization Attack
• CronJob Hijack for Privilege Escalation

Initial Recon

Nmap

# nmap -Pn --open -p- -T4 -sV -sC 10.10.10.85
Starting Nmap 7.80 ( https://nmap.org ) at 2021-04-10…