HTB: Jarvis

Linux machine demonstrating manual union-based SQL injection, phpMyAdmin web-shell creation, Python command injection, and SUID systemctl abuse.

July 13, 2026 · 8 min

HTB: Forgotten

Linux machine demonstrating an unfinished LimeSurvey installation, malicious plugin upload, Docker credential exposure, and SUID abuse through a shared volume.

June 29, 2026 · 6 min

HTB: Devvortex

Linux machine demonstrating Joomla information disclosure, authenticated template modification, database credential extraction, and apport-cli privilege escalation.

June 26, 2026 · 5 min

HTB: CozyHosting

Linux machine demonstrating Spring Boot Actuator session disclosure, cookie hijacking, command injection, JAR credential discovery, and sudo SSH abuse.

June 25, 2026 · 6 min

HTB: Codify

Linux machine demonstrating a vm2 sandbox escape, SQLite credential recovery, and Bash wildcard abuse leading to root.

June 24, 2026 · 6 min

HTB: Dog

Linux machine demonstrating exposed Git repository abuse, Backdrop CMS authenticated RCE, password reuse, and sudo abuse through the bee CLI utility.

June 22, 2026 · 6 min

Compiling Older Exploits with GCC and Docker

A practical guide for compiling older C exploits with matching GCC and GLIBC versions using Docker.

June 16, 2026 · 8 min

HTB: Editorial

Linux machine demonstrating SSRF-based internal API access, credential disclosure through Git history, and GitPython command injection for root access.

May 25, 2026 · 6 min

Linux Privilege Escalation Cheatsheet

A practical Linux privilege escalation reference covering high-impact enumeration checks, common misconfigurations, credential hunting, container escapes, and last-resort kernel exploits.

May 25, 2026 · 11 min

HTB: Bashed

Linux machine demonstrating exposed PHP web shell access, sudo-based lateral movement, and cron-driven privilege escalation.

April 30, 2026 · 4 min