HTB Writeup – MonitorsThree
Posted on 2024-08-25
RCE for CACTI monitor system, Auth bypass for Duplicati backup solution.
linux
HTB Writeup – Lantern
Posted on 2024-08-21
Skipper Proxy SSRF, Blazor traffic exploit, Privesc from process monitor
HTB Writeup – Sea
Posted on 2024-08-11
CVE-2023-41425 for WonderCMS RCE with malicious themes module.
HTB Writeup – Greenhorn
Posted on 2024-07-21
Pluck CMS RCE, and fun Depix to reveal pixelized passwords.
HTB Writeup – Skyfall
Posted on 2024-07-04
Cloud hacking: MinIO, Vault, Symlink Race, Linux MOTD Hijack
HTB Writeup – Blurry
Posted on 2024-06-09
USER Nmap does not give us much information but a domain: Then I went for subdomain enumeration to dig out more useful information using ffuf: We have 3 subdomain entries: The &