The Hive Log

Field notes & workbooks.

Hands on cybersecurity write ups in downloadable Obsidian workbook format. Build it, break it, then fix it. New drops align with the Cleanup Crew Discord and our Friday live class.

Pwned 2 systems down

// the Cleanup Crew kill count. one box crossed off at a time.

Sting owned Ubuntu 24.04 · Samba print-filter RCE → root · 2026-06-26
Tapped FreePBX VoIP appliance · unauth SQLi → root · 2026-07-25

Cleanup Crew Field Workbook · The Tapped Box

Build Tapped: A Vulnerable FreePBX Lab You Can Download

A web based four stage VoIP box themed as a small phone company. Fingerprint it as FreePBX 16, pin the vulnerable endpoint module, and map it to CVE-2025-57819 (CVSS 9.8, CISA Known Exploited), then chain unauthenticated SQLi to a webshell as asterisk to root through an incron hook. Grab the pre-built VM or follow the daily attack breakdowns below.

SangomaOS 7 / CentOS 7MediumBuild guide + pre-built VM

Open the build guide →

Cleanup Crew Field Workbook · The Sting Box

Build Sting: A Vulnerable Lab You Can Make Yourself

A four stage Linux box you can build (or grab pre-built), with the exact misconfiguration behind each stage: a Samba print filter that shells the document title, credential reuse, wide links + force user, and a systemd drop in privesc. Start here, then follow the daily attack breakdowns below.

Ubuntu 24.04MediumBuild guide + pre-built VM

Open the build guide →