11 min read
HTB Code: Python Sandbox Escape and Backy Sudo Bypass
Code box: string-based blocklist bypass, subprocess.Popen via the object graph, bcrypt SQLite passwords, and root through a backy sudo JSON path traversal.
#HTB#Python#Cybersecurity
Path Traversal
Posts tagged "Path Traversal"
2 posts found
11 min read
HTB Facts: Camaleon CMS Mass Assignment, Path Traversal, and Sudo Facter
Facts box: mass-assignment to admin, Camaleon download_private_file path traversal, an SSH key from a MinIO bucket, and root via a --custom-dir facter rule.
#HTB#Cybersecurity#Mass Assignment