HTB Writeup – MonitorsFour
Posted on 2025-12-07
CVE-2025-24367 (Cacti Auth RCE), CVE-2025-9074 (Docker Desktop Escape)
HTB Writeup – Gavel
Posted on 2025-11-30
SQL injection abusing PDO substitution in PHP Prepared Statement
HTB Writeup – Eighteen
Posted on 2025-11-16
BadSuccessor attack by creating a malicious dMSA object in AD
HTB Writeup – Conversor
Posted on 2025-10-26
Transform XSLT to HTML with extensions → special XML “SSTI”
Protected: HTB Writeup – Hercules
Posted on 2025-10-21
There is no excerpt because this is a protected post.
HTB Writeup – Signed
Posted on 2025-10-13
Ticket Forgery & Token Abuse with a service account in Win AD
HTB Writeup – DarkZero
Posted on 2025-10-05
From bi-directional MSSQL linked servers in to CVE-2024-30088 LPE