{
  "id": 16688469,
  "title": "HTB - Help Writeup - no Metasploit",
  "url": "https://urgent.news/2026/10/27/htb-help-writeup-no-metasploit",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-10-27T01:42:34.000Z",
  "source": {
    "name": "Dev.to",
    "slug": "dev-to",
    "url": "https://dev.to/nekohige/htb-help-writeup-no-metasploit-34kn"
  },
  "original_language": "en",
  "account": "The HelpDeskZ web application, version 1.0.2, was discovered running on port 80 of a machine accessible at the domain name \"help.htb\". An arbitrary file upload vulnerability was identified, which was subsequently exploited to gain a reverse shell as the \"help\" user. Subsequent enumeration revealed that the machine's kernel version 4.4.0-116-generic was susceptible to another privilege escalation vulnerability, CVE-2017-16995. Successful exploitation of this vulnerability resulted in the acquisition of a root shell. The report recommends updating HelpDeskZ to the latest version and applying kernel updates, or considering alternative systems.",
  "summary": "Summary The machine is running HelpDeskZ version 1.0.2 on port 80 (HTTP), which is vulnerable to an Arbitrary File Upload issue. This vulnerability was exploited to obtain a reverse shell as the help user. Enumeration of the kernel version revealed 4.4.0-116-generic , which is affected by a privilege escalation vulnerability, CVE-2017-16995. Exploitation of CVE-2017-16995 was successful,…",
  "key_points": [
    "HelpDeskZ web app version 1.0.2 running on port 80",
    "Arbitrary file upload vulnerability exploited for reverse shell",
    "Kernel version 4.4.0-116-generic vulnerable to CVE-2017-16995"
  ],
  "editors_take": "The combination of unpatched application flaws and outdated kernel versions allows attackers to escalate from basic web access to full administrative control over the target system.",
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}