CVE-2023-4220 for Chamilo LMS and Symlink Attack for Linux

Cloud hacking: MinIO, Vault, Symlink Race, Linux MOTD Hijack

Exploit the Blazor framework for Windows web app and SPN hijack.

The most insane Windows box on HTB.

Create a malicious Excel XLL to phish via emails.

The most insane Linux box on HTB.

Season V, Linux, Easy, Git, CVE-2022-24439, SSRF

Safe-linking is a mitigation but also a weapon in some cases.

USER Nmap does not give us much information but a domain: Then I went for sub

Fake a 0x10001 chunk on the Tcache metadata.