HackSmarter: Dark Writeup
A WordPress site running a vulnerable Modular DS plugin falls to CVE-2026-23550, an unauthenticated admin takeover bug, leading to a plugin-based shell and a Docker group escape to root.
🔒 Protected Content
This post is password protected. Please enter the password to view the content.
Incorrect password. Please try again.
Connect With Me
HTB: BedSide Writeup
You may also like
HTB: NanoCorp Writeup
NanoCorp is a Windows AD box: a job-application zip upload leaks an NTLM hash via CVE-2025-24071, AD group abuse pivots accounts, and an NTLM reflection trick (CVE-2025-33073) lands a privileged DC shell.
WebVerse Pro: HookLink Writeup
A WebVerse engagement against HookLink, a Miami dating app, chaining mass assignment into moderator access, a shell-out command injection, and a client-trusted geolocation oracle for full compromise.