HTB Writeup – Instant
Posted on 2024-10-13
Android reversing & Dump sessions from SolarPutty
Capture the flags!
LFI, JWT Forgery, SQLi, Crontab abuse, Mercurial hook, Rsync privesc
High level GLIBC I/O operation exploit: Largebin Attack + FSOP
XSS + RCE for PrestaShop & exploit SSTI on ChangeDetection.io
Exploit H2 Database for Java web app & abuse Apache Thrift
SQLPad RCE vulnerability & Froxlor exploit via Chrome remote debugging
There is no excerpt because this is a protected post.
RCE for CACTI monitor system, Auth bypass for Duplicati backup solution.
Skipper Proxy SSRF, Blazor traffic exploit, Privesc from process monitor