HTB: Cohort
Related Articles
2025-06-20
HTB: Down
Down is an easy Linux box (the first VulnLab → HTB migration) that hinges on a single primitive: escapeshellcmd() stops command injection but does nothing about argument injection. A website-uptime checker shells out to curl and nc with user input glued into the command string. I abuse curl’s mul...
2021-09-30
HTB: Meow
Meow is a Very Easy Linux box that demonstrates the critical security risk of default credentials. The machine has only one open port (23/TCP - Telnet) and allows root login with a blank password.This exposes the fundamental principle that even a single misconfiguration can lead to complete ...
2021-10-06
HTB: Appointment
Appointment is a Very Easy Linux machine that introduces SQL Injection (SQLi) vulnerabilities in web applications. The machine runs a simple login page vulnerable to SQL injection, allowing authentication bypass and flag retrieval. Path to root, at a glance: Scan the target → discover port 80 (HT...
