CCTV HackTheBox Writeup — Season 10 Linux Machine Walkthrough

HTB CCTV Active Machine: ZoneMinder SQL Injection, tcpdump Credential Sniffing & MotionEye RCE to Root

March 8, 2026 • views • 16 min read • 2,113 words

By

Havoc

hackthebox 20 htb 24 cctv linux 7 zoneminder motioneye sql-injection sqli cve-2024-51482 cve-2025-60787 hackthebox-writeup 5 htb-writeup 5 machine-writeup 4 active-machine 4 season-10 2 htb-season10 2 medium-difficulty 3 ctf 17 penetration-testing 8 ethical-hacking 8 privilege-escalation 11 lateral-movement 4 enumeration 7 exploitation 5 red-team 6 offensive-security 5 infosec 9 cybersecurity 13 hacking 6 pentesting 13 network-sniffing tcpdump capability-abuse linux-capabilities docker 2 docker-network ssh-port-forwarding metasploit 3 sqlmap hashcat 2 bcrypt rce 4 remote-code-execution 2 video-surveillance camera-security linux-privilege-escalation 3 credential-sniffing default-credentials apache php mysql