HTB: Jarvis

Linux machine demonstrating manual union-based SQL injection, phpMyAdmin web-shell creation, Python command injection, and SUID systemctl abuse.

July 13, 2026 · 8 min

HTB: Editorial

Linux machine demonstrating SSRF-based internal API access, credential disclosure through Git history, and GitPython command injection for root access.

May 25, 2026 · 6 min

HTB: Buff

Windows machine demonstrating unauthenticated file upload leading to CloudMe buffer overflow exploitation and administrator access.

May 1, 2026 · 5 min