HackTheBoxEasy
HTB: Cap
A "Security Snapshot" dashboard lets any user page through other users' packet captures by ID — one of them leaks an FTP password reused for SSH, and a stray Linux capability on python3.8 hands over root instantly.
- #idor
- #pcap-analysis
- #linux-capabilities
- #privesc