Beyond the Blog: Exploiting WordPress CVEs on HTB 'MetaTwo'
Write-up for ‘MetaTwo’, a box that involves exploiting WordPress CVEs with multiple vectors (SQLi, XXE, LFI) for foothold, and then leveraging passpie for root privilege escalation.
Lfi
From Spring Boot LFI to Ansible Root: A Guide to HTB 'Inject'
Easy rated linux box from hackthebox with Springboot application for foothold and ansible for privilege escalation.