Beyond the Blog: Exploiting WordPress CVEs on HTB 'MetaTwo'
Write-up for ‘MetaTwo’, a box that involves exploiting WordPress CVEs with multiple vectors (SQLi, XXE, LFI) for foothold, and then leveraging passpie for root privilege escalation.
Sqli
Scoring with WebSockets: A Winning Goal on HTB 'Soccer'
Easy rated linux box from hackthebox comprising sqli, tiny file manager rce and doas for privilege escalation.
From gRPC SQLi to Pyload Root: A Guide to HTB 'PC'
Easy rated linux box from hackthebox comprising of gRPC and SQLi for foothold, and a misconfigured Pyload for privilege escalation.