Fish.io - Hack

Hack The Box is a popular online platform that offers a variety of virtual machines (VMs) for cybersecurity enthusiasts to practice their hacking skills. One of the boxes available on the platform is Fish.io, a Linux-based VM that simulates a real-world hacking scenario. In this walkthrough, we'll explore the steps to compromise the Fish.io box and gain root access.

<!-- TODO: move to prod env --> This hint suggests that the website might be running in a non-production environment. We can try to access the /admin directory, which often contains administrative interfaces: hack fish.io

sudo -l We can leverage this configuration to gain root access: Hack The Box is a popular online platform

su root

cat ~fish/config The file contains a password for the root user. We can now switch to the root user and gain full access to the system: hack fish.io

You're interested in writing about Hack The Box's Fish.io, I presume?