01From a LAN scan to code execution: tracing an unauthenticated TCL TV command chain
->02When the address replaced the name: Apache Thrift C++ TLS identity confusion
->03XML signature forgery via DER-loaded public keys bypasses xmlseclibs 4.0.0 RSA-to-HMAC key-confusion fix
->04Six bytes to silence: an unauthenticated kill switch in Laravel Nightwatch
->05HTML-to-Markdown quadratic parsing: small documents, expensive conversions
->06GrumPHP option injection: from a staged filename to code execution
->07Preparing for HTB CPTS: A Field Guide to the Ten-Day Marathon
->08HTB SmartHire writeup
->09HTB Odyssey writeup
->10HTB Ghostlink writeup
->11HTB Orion writeup
->12HTB Nexus writeup
->13HTB Fireflow writeup
->14HTB BedSide writeup
->15HTB MakeSense writeup
->16HTB Cohort writeup
->17HTB Connected writeup
->18HTB DanglingTree writeup
->19HTB Paperwork writeup
->