HTB: Sunday

Solaris machine using the finger service to enumerate valid users, brute forcing SSH, cracking a leaked shadow backup, and abusing a sudo wget rule for root.

November 14, 2025 · 4 min