HTB: Mentor
Linux machine brute-forcing an SNMP community string for API credentials, chaining a command injection into a Docker container, pivoting via ligolo to PostgreSQL, and abusing an SNMP config password for root.
Linux machine brute-forcing an SNMP community string for API credentials, chaining a command injection into a Docker container, pivoting via ligolo to PostgreSQL, and abusing an SNMP config password for root.
Linux box chaining a Spring Boot Actuator session leak into cookie hijacking, command injection, JAR credential discovery, and sudo SSH abuse.