HTB: Cohort
Related Articles
2025-06-20
HTB: Down
Down is an easy Linux box (the first VulnLab → HTB migration) that hinges on a single primitive: escapeshellcmd() stops command injection but does nothing about argument injection. A website-uptime checker shells out to curl and nc with user input glued into the command string. I abuse curl’s mul...
2026-08-08
Linux Privilege Escalation Cheatsheet
Quick reference commands — replace/expand with your own notes. # SUID binariesfind / -perm -4000 -type f 2>/dev/null# Sudo rightssudo -l# Cron jobscat /etc/crontab# Kernel versionuname -a Python reverse shell one-liner: import socket, subprocess, osdef connect(host, port): s = socket....
2021-09-30
HTB: Fawn
Fawn is a Very Easy Linux machine that demonstrates the security risks of FTP services with anonymous access enabled. The machine has only one open port (21/TCP - FTP) running vsftpd 3.0.3, which allows anonymous login and contains a flag file accessible without authentication. Path to root,...
