ZeroBoxAgent T writeup and attack path
Agent T is a easy Linux machine on TryHackMe that I solved myself. This page is my short attack path summary and the techniques it trains.
| Platform | TryHackMe |
|---|---|
| Operating system | Linux |
| Difficulty | Easy |
| Time to user | 4m |
| Time to root | 10m |
| User owned | 2026-08-15 |
| Root owned | 2026-08-15 |
Attack path summary
Target is running PHP 8.1.0-dev with the User-Agentt backdoor. Send 'User-Agentt: zerodiumsystem("id");' for instant RCE.
Techniques
PHP-8.1.0-dev Backdoor User-Agent-t RCE
Related solved machines
Other machines I solved that share techniques with Agent T.
- Vulnerability Capstone (THM Linux Easy)
- Pennyworth (HTB Linux Very Easy)
Track Agent T in ZeroBox. Log your progress, notes and flags offline in your browser, and follow the pentest methodology checklist.
Agent T belongs to TryHackMe. This page contains only my own notes.