THM: Do Not Disturb
Linux boot2root combining a NoSQL authentication bypass, Node.js SSTI, Node inspector abuse, and disk-group privilege escalation.
Command Execution
HTB: Irked
Linux machine exploiting the UnrealIRCd 3.2.8.1 backdoor for a shell, steganography-hidden credentials for lateral movement, and a SUID binary’s relative-path execution for root.