HTB Writeup – Helix
Posted on 2026-05-10
An industrial CTF of CVE-2023-40037 for Java Apache Nifi & OPC UA interface
An industrial CTF of CVE-2023-40037 for Java Apache Nifi & OPC UA interface
Java CXF SOAF XXE (CVE-2022-46364) to Hoverfly auth RCE (CVE-2025-54123)
Mirth CVE-2023-43208 RCE to root via Python f-string injection
APOC Reversing and Cypher Injection with Java-based application
Exploit H2 Database for Java web app & abuse Apache Thrift