HackTheBox

1 entry · web

• Browsed medium 2026-04-13

  Malicious Chrome extension upload to reach an internal service, Bash array-index command injection via unquoted argument, and privilege escalation via world-writable __pycache__ poisoning of a sudo-allowed Python script.