HackSmarter: Casino Writeup
A HackSmarter Medium Linux box: a leaked JS sourcemap exposes an unauthenticated API leaking guest logins, a Jinja2 SSTI gives RCE, and a misconfigured SSH key and a leaked log lead to root.
🔒 Protected Content
This post is password protected. Please enter the password to view the content.
Incorrect password. Please try again.
Connect With Me
HTB: MakeSense Writeup
You may also like
HTB: Helix Writeup
Medium Linux box featuring Apache NiFi CVE-2023-34468 for initial access, SSH key recovery for a foothold, and OPC-UA industrial protocol manipulation to trigger a privileged maintenance console.
HTB: Kobold Writeup
Kobold is an easy Linux machine featuring an MCPJam inspector RCE, a PrivateBin template cookie LFI for container escape, and Docker API abuse to reach root.