HTB: SolidState

Linux machine using default Apache James admin credentials to read mail and reset passwords, exploiting a James 2.3.2 RCE to escape a restricted shell, then hijacking a root cron job for full root.

November 12, 2025 · 5 min