HTB: Poison

FreeBSD machine chaining an LFI-driven log poisoning webshell with a multiply-encoded backup password, then SSH port forwarding into a root-owned VNC session for root.

November 13, 2025 · 6 min