WingData
Created|HTB Machines|HackTheBox•Linux•Privilege Escalation•RCE•CVE-2025-47812•CVE-2025-4517•Wing FTP•Null Byte Injection•Tarfile•Password Cracking
HTB Easy Linux machine — Wing FTP RCE via Null Byte Injection (CVE-2025-47812), credential harvesting, and root via Python tarfile symlink bypass (CVE-2025-4517)
Youssef Kessentini
Security researcher & CTF player. Escalating privileges one machine at a time.
Announcement
🚩 New writeups every week! HTB machines, CTF challenges, and more.
Recent Posts
Tags
HackTheBoxWindowsActive DirectoryDeleted ObjectsbloodyADSMBVS CodeMalicious ExtensionCTFWebForensicsOSINTMiscJWTSteganographyPythonLinuxCVE-2026-23744MCPJam InspectorUnauthenticated RCEJupyterLabWebSocketHardcoded SecretsPrivilege EscalationSQL InjectionCVE-2024-51482CVE-2025-60787ZoneMindermotionEyeCommand InjectionDefault CredsCredential CrackingPortswiggerWeb SecurityPath TraversalLFIBrute ForcePDF InjectionWordPressStored XSS
Website Info
Article Count :
16
Unique Visitors :
Page Views :
Last Update :