HTB Writeup – PermX
Posted on 2024-07-07
CVE-2023-4220 for Chamilo LMS and Symlink Attack for Linux
Cloud hacking: MinIO, Vault, Symlink Race, Linux MOTD Hijack
Safe-linking is a mitigation but also a weapon in some cases.
USER Nmap does not give us much information but a domain: Then I went for sub
CVE-2023-30253 for Dolibarr & CVE-2022-37706 for Enlightment
There are a lot shellcode loaders for Windows but rarely for Linux.