Tag: Path Traversal | Youssef Kessentini

Created2026-10-14|HTB Machines|HackTheBox•Linux•Command Injection•Path Traversal•CVE-2025-66034•CVE-2024-25082•fontTools•FontForge•Git Leak•Sudo Misconfiguration

HTB Medium Linux machine — credentials from an exposed .git, a fontTools arbitrary file write (CVE-2025-66034) for a webshell, FontForge archive command injection (CVE-2024-25082) to reach steve, and root by overwriting /etc/sudoers through a setuptools path traversal

Path Traversal

Created2026-07-01|Portswigger|Portswigger•Web Security•Path Traversal

What I learned after completing Path Traversal path in Portswigger