HTB: Canape
Linux machine chaining an exposed .git repository, a cPickle insecure deserialization RCE recovered from commit history, a CouchDB privilege-escalation CVE, and sudo pip abuse to root.
Insecure Deserialization
HTB: Precious
Linux machine exploiting a pdfkit command injection (CVE-2022-25765) for a foothold, then a Ruby YAML deserialization bug in a sudo-permitted script for root.