HTB: Cohort
An easy-difficulty machine with an SSRF vulnerability that exposes internal services and is running an older version of PackageKit.
Easy Read ↗
I build things, explore various security domains, and share what I learn along the way. Have a look around.
Recent projects and challenge walkthroughs.
An easy-difficulty machine with an SSRF vulnerability that exposes internal services and is running an older version of PackageKit.
A very simple machine with vulnerable versions of Craft CMS and Telnet.
Exploiting CVE-2025-57819 in the FreePBX system, and abusing incron.d and dahdi.conf for privilege escalation.