https://old.frang4.tech/tags/ai/ Recent content in AI on Hugo en-us Tue, 24 Jun 2025 03:38:50 -0300 https://old.frang4.tech/posts/htb-machines/artificial/writeup/ Tue, 24 Jun 2025 03:38:50 -0300 https://old.frang4.tech/posts/htb-machines/artificial/writeup/ <p><code>Artificial</code> is a Hack The Box machine from season 8</p> <h2 id="summary-how">Summary (How?)</h2> <p>Artificial is a machine with a web interface that allows to upload and execute TensorFlow .h5 model files. The initial foothold was obtained by embedding a reverse shell code inside a Lambda layer and exploiting the backend&rsquo;s behavior which loads these models without sandboxing. From there, we accessed the Flask app&rsquo;s source code, extracted database credentials, dumped the user table, cracked hashes using rockyou.txt, and obtained valid SSH credentials for user gael, leading to the user flag.</p>