📰Hack The Box (HTB) Paper

Recon

Foothold

CVE-2019-17671

WordPress <= 5.2.3 - Unauthenticated View Private/Draft PostsWPScan

LFI

User flag

Privilege Escalation

CVE-2021-3560

https://github.blog/2021-06-10-privilege-escalation-polkit-root-on-linux-with-bug/

POC: https://github.com/Almorabea/Polkit-exploit/blob/main/CVE-2021-3560.py