HTB: Jarvis

Linux machine demonstrating manual union-based SQL injection, phpMyAdmin web-shell creation, Python command injection, and SUID systemctl abuse.

July 13, 2026 · 8 min

HTB: CozyHosting

Linux machine demonstrating Spring Boot Actuator session disclosure, cookie hijacking, command injection, JAR credential discovery, and sudo SSH abuse.

June 25, 2026 · 6 min

HTB: Busqueda

Linux machine demonstrating Python eval command injection, credential reuse, Docker configuration disclosure, and sudo script abuse.

April 23, 2026 · 6 min