Walkthrough of HackTheBox Facts machine — from Camaleon CMS mass assignment to root via sudo facter custom facts
Posts for: #Path-Traversal
HTB WingData — Wing FTP RCE to Root via Python tarfile Filter Bypass
Walkthrough of HackTheBox WingData machine — from Wing FTP Server NULL byte Lua injection to root via Python tarfile filter=“data” PATH_MAX bypass