There is no excerpt because this is a protected post.

CVE-2023-4220 for Chamilo LMS and Symlink Attack for Linux

Cloud hacking: MinIO, Vault, Symlink Race, Linux MOTD Hijack

Exploit the Blazor framework for Windows web app and SPN hijack.

The most insane Windows box on HTB.

Create a malicious Excel XLL to phish via emails.

The most insane Linux box on HTB.

Season V, Linux, Easy, Git, CVE-2022-24439, SSRF

USER Nmap does not give us much information but a domain: Then I went for subdomain enumeration to dig out more useful information using ffuf: We have 3 subdomain entries: The &

Fake a 0x10001 chunk on the Tcache metadata.