HTB: Broker

Linux machine exploiting Apache ActiveMQ (CVE-2023-46604) for initial access, then abusing sudo nginx rights for root.

December 18, 2025 · 4 min