HTB: Precious

Linux machine exploiting a pdfkit command injection (CVE-2022-25765) for a foothold, then a Ruby YAML deserialization bug in a sudo-permitted script for root.

February 15, 2026 · 5 min