MakeSense
Created|HTB Machines|HackTheBox•Linux•Privilege Escalation•WordPress•Stored XSS•CSRF•Client-Side Encryption•Credential Reuse•Webshell
HTB Medium Linux machine: a password leaked in a voice message, a forged client-side-encrypted payload that turns into stored XSS and a new WordPress admin, and root through an OCR service that saves recognized text as a PHP file
Youssef Kessentini
Security researcher & CTF player. Escalating privileges one machine at a time.
Announcement
🚩 New writeups every week! HTB machines, CTF challenges, and more.
Recent Posts
Tags
HackTheBoxWindowsActive DirectoryDeleted ObjectsbloodyADSMBVS CodeMalicious ExtensionCTFWebForensicsOSINTMiscJWTSteganographyPythonLinuxCVE-2026-23744MCPJam InspectorUnauthenticated RCEJupyterLabWebSocketHardcoded SecretsPrivilege EscalationSQL InjectionCVE-2024-51482CVE-2025-60787ZoneMindermotionEyeCommand InjectionDefault CredsCredential CrackingPortswiggerWeb SecurityPath TraversalLFIBrute ForcePDF InjectionWordPressStored XSS
Website Info
Article Count :
16
Unique Visitors :
Page Views :
Last Update :




