HTB: Editorial
Linux machine using SSRF to reach an internal API, recovering credentials from Git history, and escalating via a GitPython command injection.
Linux machine using SSRF to reach an internal API, recovering credentials from Git history, and escalating via a GitPython command injection.
Linux box chaining a Spring Boot Actuator session leak into cookie hijacking, command injection, JAR credential discovery, and sudo SSH abuse.