HTB Writeup – Era
Posted on 2025-07-27
Exploit PHP ssh2 extension & Linux ELF self-signed signature
RCE for Roundcube (CVE‑2025‑49113) & below Privesc (CVE-2025-27591)
Exploit CVE-2023-46818 for ISPConfig to return a root shell
Exploit GoPhish Webhook using n8n, and the Restic Backup Utility