HTB: Popcorn

Linux machine bypassing a torrent hosting site’s file upload filter via a Content-Type header change to get a PHP webshell, then exploiting a PAM file-tampering vulnerability for root.

December 18, 2025 · 4 min