HTB: Editorial

Linux machine using SSRF to reach an internal API, recovering credentials from Git history, and escalating via a GitPython command injection.

February 21, 2026 · 6 min

HTB: CozyHosting

Linux box chaining a Spring Boot Actuator session leak into cookie hijacking, command injection, JAR credential discovery, and sudo SSH abuse.

November 17, 2025 · 6 min