htb

• HTB Support Writeup | SMB Share Loot → Hardcoded LDAP Creds → LDAP Password Leak → RBCD → DCSync Domain Compromise
• HTB DanglingTree Writeup | SMB Enumeration to Windows Admin Center RCE to Domain Compromise
• HTB Cohort Writeup | SSRF to Marimo Pre-auth RCE (WS Terminal) to Root via PackageKit LPE (CVE-2026-41651)
• HTB Enigma Writeup | OpenSTAManager RCE (CVE-2025-69212) to Root via OliveTin
• HTB Devhub Writeup | MCPJam RCE (CVE-2026-23744) to Root via Jupyter Notebook
• HTB BedSide Writeup | PDFMiner LFI (CVE-2025-64512) to Root via PyTorch Deserialization
• HTB – Snapped
• HTB – CCTV
• HTB-Facts
• HTB – MonitorsFour
• HTB – Expressway