HTB: CozyHosting

Linux machine demonstrating Spring Boot Actuator session disclosure, cookie hijacking, command injection, JAR credential discovery, and sudo SSH abuse.

June 25, 2026 · 6 min