/// HACKTHEBOX
[ MACHINES ]
-
Browsed MediumMalicious Chrome extension upload to reach an internal service, Bash array-index command injection via unquoted argument, and privilege escalation via world-writable __pycache__ poisoning of a sudo-allowed Python script.