Youssef Kessentini — Reverse Koat Shell - Escalating privileges, one write-up at a time.

Created2026-07-11|HTB Machines|HackTheBox•Linux•SQL Injection•CVE-2024-51482•CVE-2025-60787•ZoneMinder•motionEye•Command Injection•Default Creds•Credential Cracking

HTB Easy Linux machine — default creds into ZoneMinder, time-based SQL injection (CVE-2024-51482) to dump password hashes, and root via motionEye command injection (CVE-2025-60787)

Path Traversal

Created2026-07-01|Portswigger|Portswigger•Web Security•Path Traversal

What I learned after completing Path Traversal path in Portswigger

WingData

Created2026-06-25|HTB Machines|HackTheBox•Linux•Privilege Escalation•RCE•CVE-2025-47812•CVE-2025-4517•Wing FTP•Null Byte Injection•Tarfile•Password Cracking

HTB Easy Linux machine — Wing FTP RCE via Null Byte Injection (CVE-2025-47812), credential harvesting, and root via Python tarfile symlink bypass (CVE-2025-4517)