HTB Easy Linux machine — unauthenticated RCE in a Next.js app (CVE-2025-55182, React2Shell), an MD5 hash cracked from a SQLite database, and root through a Node.js inspector left open on localhost
Youssef Kessentini
Security researcher & CTF player. Escalating privileges one machine at a time.
