Articles by tag: pentest-walkthrough

HTB Stacked: XSS and Docker escape walkthrough

Detailed walkthrough of the Stacked machine on Hack The Box: nmap reconnaissance, vhost ffuf, XSS in Referer, base64-proxy mail.stacked.htb. Master RCE and container escape. Read the guide for pentesters.

RCE in MCPJam Inspector: HTB Kobold walkthrough

Full HTB Kobold walkthrough: RCE via MCPJam v1.4.2, Docker LFI, credential reuse to root. For devsecops — code, commands, GHSA-232v-j27c-5pp6 vulnerabilities.