Base attack path and techniques
Base is a very easy Linux machine on Hack The Box that I solved myself. This page is my short attack path summary and the techniques it trains.
| Platform | Hack The Box |
|---|---|
| Operating system | Linux |
| Difficulty | Very Easy |
| Time to user | 25m |
| Time to root | 1h 0m |
| User owned | 2026-08-20 |
| Root owned | 2026-08-20 |
| Relevant for | HTB-Starting-Point |
Attack path summary
Abuse PHP loose comparison (type juggling) in JSON login endpoint to authenticate as admin, then upload webshell.
Techniques
PHP Type Juggling File Upload
Track Base in ZeroBox. Log your progress, notes and flags offline in your browser, and follow the pentest methodology checklist.
Base belongs to Hack The Box. This page contains only my own notes.