Stratosphere

Verified writeups for the Stratosphere machine of Hack The Box

Stratosphere

$ tldr Apache Struts (CVE-2017-5638) → Python library hijacking

CVE / Bulletins: CVE-2017-5638 ↗

·	·
Operating system	Linux
Difficulty	Medium
Vector	Linux privesc
IP	10.10.10.64
Retirement date	2018-09-01
Skills	Apache Struts Exploitation (CVE-2017-5638) Python Library Hijacking (Privilege Escalation)

Writeups

Language	Author	Format	Link
🇪🇸 ES	S4vitar	Vídeo	Open
🇬🇧 EN	0xdf	Texto	Open
🇬🇧 EN	IppSec	Vídeo	Open

---

Comments & tips

Did the official writeup not work? Found a smarter trick? Share it here — comments live in GitHub Discussions.

Last updated: 2026-06-07