HTB: TartarSauce

Linux machine chaining a WordPress plugin RFI for a foothold, sudo tar wildcard abuse for a second user, and a race condition in a root-run backup script for a SUID shell as root.

November 20, 2025 · 8 min