HTB: CozyHosting

Linux box chaining a Spring Boot Actuator session leak into cookie hijacking, command injection, JAR credential discovery, and sudo SSH abuse.

November 17, 2025 · 6 min